[SOLVED] Using curl to log in to https page.

Chris_no · 08-28-2009, 12:52 AM

Hello.

I am having difficulties using curl to log into a specific site using https.

The command I use is:

Code:

curl -k -b cookie -c cookie -d "hldno=xxxx&passphrase=xxxx&btn_login.x=45&btn_login.y=9" -o side.html https://secure.site.com/user/login.php

Liveheaders in Firefox captures this when I log in manually:

Code:

https://secure.site.com/user/login.php

POST /user/login.php HTTP/1.1
Host: secure.site.com
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: nb,no;q=0.8,nn;q=0.6,en-us;q=0.4,en;q=0.2
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: https://secure.site.com/user/login.php
Cookie: gmpcucode=978; __utma=71813964.1151648937473018600.1250869847.1250869847.1251397437.2; __utmz=71813964.1250869847.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); gmsid=bq1oo34nb4haqg34qukuvnsgpb1h5la3; gmlangcode=0; gm_textsize=62.5; __utmb=71813964.1.10.1251397437; __utmc=71813964
Content-Type: application/x-www-form-urlencoded
Content-Length: 70
hldno=username-R&passphrase=password&btn_login.x=45&btn_login.y=9
HTTP/1.x 302 Found
Date: Thu, 27 Aug 2009 18:24:40 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: gmpcucode=978; expires=Sat, 26-Sep-2009 18:24:40 GMT; path=/; domain=.site.com
Location: setsecqa.php
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

I may mention that the password has a plus sign that is sent like this "xxx%2Bxxx".

This is the login form:

Code:

<form name="formpost" action="/user/login.php?gmsid=p31gieju399j7fjeqj5t1n77kigpq673" method="post">
	<tr>
		<td class="literal" align="right">Holding Number:</td>
		<td class="regular" valign="center">
			<input type="textbox" name="hldno" value="" size="30" autocomplete="off">&nbsp;(example: 50-00-01-G or 500001g)
			<a href="losthold.php?gmsid=p31gieju399j7fjeqj5t1n77kigpq673"><u>Forgot your Holding Number?</u></a>
		</td>
	</tr>
	<tr>
		<td class="literal" align="right">Passphrase:</td>
		<td class="regular" valign="center">
			<input type="password" name="passphrase" value="" size="30" autocomplete="off">&nbsp;Lost Passphrase? <a href="lostpass.php?gmsid=p31gieju399j7fjeqj5t1n77kigpq673"><u>Request a New Passphrase</u></a>
		</td>
	</tr>
	<tr>
		<td class="regular">&nbsp;</td>
		<td class="regular">
			<input type="image" name="btn_login" alt="Login" src="/en/images/user_images/gm_btn_login.gif" border="0">
		</td>
	</tr>
	</form>

kdelover · 08-28-2009, 02:48 AM

I'm not so familiar with using curl,how about elinks if your looking for a command line browser.

JulianTosh · 08-28-2009, 02:57 AM

Just gonna throw out a guess.

Perhaps you need to curl with the -c first to get the cookie... then make a second call with the -b and -d to send the cookie and credentials.

Chris_no · 09-03-2009, 03:50 PM

Okay with help from a PC guru friend of mine we solved the https difficulties.

However not with the above site who only was a test site I practiced on.

I used a program named charlie to log what curl did differently from firefox.

http://www.charlesproxy.com/

Code:

#!/bin/bash

curl -x 127.0.0.1:8888 -k -b kake3 -c kake3 https://site.com/noauth/login/
curl -x 127.0.0.1:8888 -k -b kake3 -c kake3 -d "USER=username&PASSWORD=password&TARGET=/options/for/stupid/script/" https://site.com/stupid_script_url
curl -x 127.0.0.1:8888 -k -b kake3 -c kake3 -o result.html https://site.com/real_url

So basicly I had a script that accepted hidden inputs and redirected me to the loginpage after giving me a coockie and all I needed to do was call the correct url afterwards with curl to be accepted into the site...

If that made any sense to anybody.

Update!!!

The redirect situation need not be as complicated as this.
I have just been made aware that curl don't redirect as default.
So a better way to do the above would just be adding a -L option like this.

Code:

#!/bin/bash

curl -x 127.0.0.1:8888 -k -L -b kake3 -c kake3 -d "USER=username&PASSWORD=password&TARGET=/options/for/stupid/script/" https://site.com/stupid_script_url