how to use cookies from tcp header to bypass login page

kamariz · 01-19-2007, 03:08 AM

hi all..

when doing a network monitoring in my own lab using tcpflow, i got this tcp header info.

Quote:

POST /sendmessage.php HTTP/1.1
Host: www.friendster.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.friendster.com/bulletin.php?statpos=bulletintable&bid=109308367&uid=215772
Cookie: friendster_HBX=lucky=nope; friendster_cacheList=/=1169193129765; friendster_auth=uid%3D2188153%26lastclick%3D1169193544%26cty%3Dmy%26icty%3Dmy%26mac%3DMjg3N2VhMjhhN2 Y3OWY0OWM1ZTQ0NDZjMzNjZWFmZmU%2A; friendster_tzoffset=28800; friendster_6apart_auth=uid%3D2188153%26lastclick%3D1169193544%26timeout%3D1169279944%26cty%3Dmy%26ma c%3DZDhlYzhiNzY0ZmFmNjczMzExMmJiNzY1MjM4MWIxNTE%2A; friendster_pusit_auth=uid%3D2188153%26lastclick%3D1169193544%26timeout%3D1169279944%26cty%3Dmy%26mac %3DMzYyMTZkODU2ZjAyOWI2NTg2NjNiODg2YmUyZjIyZTc%2A; friendster_update=/user.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 7183

i m using 2 pc to do this experiment. 1 pc running tcpflow to dump all the packet and use another pc to login to my frendster. what i want to do is, using the cookies info from the tcp header to bypass friendster's login page.

anyone have suggestion,tools,tutorial on how to accomplish my goal?

thanks ..

chort · 01-19-2007, 08:04 PM

a) That's not a TCP cookie, it's a HTTP cookie. TCP cookies are used to defend against synfloods, they aren't used for authentication.
b) It seems likely that you would be trying to automatically login to Friendster with scripts (and then perform some automated functions), which I'm fairly certain is forbidden by the Friendster ToS.