Waraxe IT Security Portal

zerocred · Beginner

I want to automate interaction with a website that has a javascript UI, data is sent by point and clicking various options that are loaded into a form and then sent by clicking the 'send' button.

What I want to do is automate it by bypassing the point and click code so that I can programatically present my data to it and initiate the 'send' from another (perl) program.

I can see the javascript files (there are quite many) - how do I initiate the send message my own?

Can it be done?

lenny · Valuable expert

Ok, I suggest you download "tamper data" - A plugin for Firefox. When you submit the page, a request is probably generated (AJAX or otherwise) and submitted to another part of the site (a php script for example).

I suggest you use tamper data to see what data is being sent, and where the data is being sent to (ie, the request target). Once you know this, you should be able to find a perl module or similar to send a similar request that you can modify as you like Smile

Questions? Thoughts?

zerocred · Beginner

Thanks for the suggestions. Unfortunately the site only works with IE - they spend quite a lot of effort ensuring it is only IE and windows running. I tried UserAgent switching in Firefox but it didn't work.

I was able to use Fiddler to see what is in the messages (they are encrypted normally) but the data is signed so simply tampering with the data doesn't work either.