Re: Simulating a browser session

2003-01-16 Thread Will Hartung
 From: Brandon Cruz [EMAIL PROTECTED]
 Sent: Thursday, January 16, 2003 10:23 AM
 Subject: Simulating a browser session


 Does anyone have familiarity with using JAVA to simulate a browser session
 and navigate multiple pages in a https based web application, storing
 session cookies, doing form posts, etc.?

Whenever wierd stuff like this starts happening, I've found that it's really
helpful to have some kind of man in the middle processes to watch what's
coming and going over the wire, like packet sniffers, or a logging proxy,
etc. Anything that you can stick between a working browser and the actual
application that can give insight to the comings and goings of the requests,
and what's in the headers.

Of course, then I realized that your going over SSL, which kind of makes
that difficult to do.

Any chance you can run over HTTP within a controlled environment?

While it's nice to apply standards, and assume that things SHOULD work, they
don't really help when what should work doesn't, and then it's all reverse
engineering.

I can't really give specifics, as a lot of it is platform dependent, and
I've done a bunch of one off hacks and what not in the past.

But, the most basic tool, if you can get this out of the SSL environment,
would be to use a packet sniffer to watch a working transaction. These can
reveal a lot of subtle details in these cases.

Regards,

Will Hartung
([EMAIL PROTECTED])




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Simulating a browser session

2003-01-16 Thread Turner, John

This might be of interest:

http://www.innovation.ch/java/HTTPClient/

John


 -Original Message-
 From: Brandon Cruz [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 16, 2003 1:24 PM
 To: Tomcat Users List
 Subject: Simulating a browser session
 
 
 
 Does anyone have familiarity with using JAVA to simulate a 
 browser session
 and navigate multiple pages in a https based web application, storing
 session cookies, doing form posts, etc.?
 
 We are trying to do an https post, but the application is 
 acting as if the
 parameters are never passed.
 
 We have done the exact same thing before at another website with no
 problems.
 
 The only difference is that the one that does not work is 
 using session
 cookies, although we are able to successfully get and set the cookies.
 
 In both situations, the web application we are trying to 
 navigate is ASP
 based.
 
 We are trying to integrate one of our partners applications 
 to ours and
 could really use any information, web pages to reference, 
 anything.  We're
 out of ideas.
 
 Thanks in advance and sorry for the off topic post, please reply to me
 directly.
 
 Brandon
 
 
 
 --
 To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Simulating a browser session

2003-01-16 Thread Jason Pyeron
Brandon,

9 times out of 10 it is my cookie, or ssl, or other non-complient logic in 
my code, but otherwise, this may be you, ...

1 times out of 10 when I have trouble interacting with a 
webapplication, it is caused by the useragent setting i pass.

My steps to diagnose my problems are:

1: Try to work with the web app in internet explorer 5.5 
2: trace interactions with site using cURL acting as IE5.5
3: trace interactions with site using cURL acting as the suspect agent

my favorite usage is:
 curl -viLsA 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; .NET CLR 1.0.3705)' 
url

-F for form values
-b  -c for cookies
-k for ssl issues
-u for user auth
-o for output file ( i like the screen better )



On Thu, 16 Jan 2003, Brandon Cruz wrote:


Does anyone have familiarity with using JAVA to simulate a browser session
and navigate multiple pages in a https based web application, storing
session cookies, doing form posts, etc.?

We are trying to do an https post, but the application is acting as if the
parameters are never passed.

We have done the exact same thing before at another website with no
problems.

The only difference is that the one that does not work is using session
cookies, although we are able to successfully get and set the cookies.

In both situations, the web application we are trying to navigate is ASP
based.

We are trying to integrate one of our partners applications to ours and
could really use any information, web pages to reference, anything.  We're
out of ideas.

Thanks in advance and sorry for the off topic post, please reply to me
directly.

Brandon



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron   http://www.pyerotechnics.com   -
- Owner  Lead  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)   500 West University Parkway #1S -
- +1 410 467 2266 (f)   Baltimore, Maryland  21210-3253 -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain 
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and 
notify the sender immediately.  Any other use of the email by you 
is prohibited.






--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Simulating a browser session

2003-01-16 Thread Tim Funk
I like this HttpClient instead ...

http://jakarta.apache.org/commons/httpclient/index.html

-Tim

Turner, John wrote:

This might be of interest:

http://www.innovation.ch/java/HTTPClient/

John




-Original Message-
From: Brandon Cruz [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 16, 2003 1:24 PM
To: Tomcat Users List
Subject: Simulating a browser session



Does anyone have familiarity with using JAVA to simulate a 
browser session
and navigate multiple pages in a https based web application, storing
session cookies, doing form posts, etc.?

We are trying to do an https post, but the application is 
acting as if the
parameters are never passed.

We have done the exact same thing before at another website with no
problems.

The only difference is that the one that does not work is 
using session
cookies, although we are able to successfully get and set the cookies.

In both situations, the web application we are trying to 
navigate is ASP
based.

We are trying to integrate one of our partners applications 
to ours and
could really use any information, web pages to reference, 
anything.  We're
out of ideas.

Thanks in advance and sorry for the off topic post, please reply to me
directly.

Brandon



--
To unsubscribe, e-mail:   

mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]





--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Simulating a browser session

2003-01-16 Thread Turner, John

Nice.  Someone at Jakarta needs to work on their search engine placement.
;)

John

 -Original Message-
 From: Tim Funk [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 16, 2003 2:08 PM
 To: Tomcat Users List
 Subject: Re: Simulating a browser session
 
 
 I like this HttpClient instead ...
 
 http://jakarta.apache.org/commons/httpclient/index.html
 
 -Tim
 
 Turner, John wrote:
  This might be of interest:
  
  http://www.innovation.ch/java/HTTPClient/
  
  John
  
  
  
 -Original Message-
 From: Brandon Cruz [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 16, 2003 1:24 PM
 To: Tomcat Users List
 Subject: Simulating a browser session
 
 
 
 Does anyone have familiarity with using JAVA to simulate a 
 browser session
 and navigate multiple pages in a https based web 
 application, storing
 session cookies, doing form posts, etc.?
 
 We are trying to do an https post, but the application is 
 acting as if the
 parameters are never passed.
 
 We have done the exact same thing before at another website with no
 problems.
 
 The only difference is that the one that does not work is 
 using session
 cookies, although we are able to successfully get and set 
 the cookies.
 
 In both situations, the web application we are trying to 
 navigate is ASP
 based.
 
 We are trying to integrate one of our partners applications 
 to ours and
 could really use any information, web pages to reference, 
 anything.  We're
 out of ideas.
 
 Thanks in advance and sorry for the off topic post, please 
 reply to me
 directly.
 
 Brandon
 
 
 
 --
 To unsubscribe, e-mail:   
  
  mailto:[EMAIL PROTECTED]
  For additional commands, e-mail:
  mailto:[EMAIL PROTECTED]
  
  --
  To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
mailto:[EMAIL PROTECTED]
 
 


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Simulating a browser session

2003-01-16 Thread Brandon Cruz
Jason,

Thanks for the info.  What exactly is this cURL program?  Is it something I
can run from a linux command line or a program I can download?  Anyway, I
really appreciate the info!

Brandon

-Original Message-
From: Jason Pyeron [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 16, 2003 12:30 PM
To: [EMAIL PROTECTED]
Subject: Re: Simulating a browser session


Brandon,

9 times out of 10 it is my cookie, or ssl, or other non-complient logic in
my code, but otherwise, this may be you, ...

1 times out of 10 when I have trouble interacting with a
webapplication, it is caused by the useragent setting i pass.

My steps to diagnose my problems are:

1: Try to work with the web app in internet explorer 5.5
2: trace interactions with site using cURL acting as IE5.5
3: trace interactions with site using cURL acting as the suspect agent

my favorite usage is:
 curl -viLsA 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; .NET CLR
1.0.3705)' url

-F for form values
-b  -c for cookies
-k for ssl issues
-u for user auth
-o for output file ( i like the screen better )



On Thu, 16 Jan 2003, Brandon Cruz wrote:


Does anyone have familiarity with using JAVA to simulate a browser session
and navigate multiple pages in a https based web application, storing
session cookies, doing form posts, etc.?

We are trying to do an https post, but the application is acting as if the
parameters are never passed.

We have done the exact same thing before at another website with no
problems.

The only difference is that the one that does not work is using session
cookies, although we are able to successfully get and set the cookies.

In both situations, the web application we are trying to navigate is ASP
based.

We are trying to integrate one of our partners applications to ours and
could really use any information, web pages to reference, anything.  We're
out of ideas.

Thanks in advance and sorry for the off topic post, please reply to me
directly.

Brandon



--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron   http://www.pyerotechnics.com   -
- Owner  Lead  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)   500 West University Parkway #1S -
- +1 410 467 2266 (f)   Baltimore, Maryland  21210-3253 -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and
notify the sender immediately.  Any other use of the email by you
is prohibited.






--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Simulating a browser session

2003-01-16 Thread Michael Della Bitta
Brandon:

curl is a command line utility similar to wget (which you probably 
already have). it's available for download on sourceforge.net.

Michael Della Bitta
Columbia University


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]



Re: Simulating a browser session

2003-01-16 Thread Will Hartung
 From: Brandon Cruz [EMAIL PROTECTED]
 Sent: Thursday, January 16, 2003 11:52 AM
 Subject: RE: Simulating a browser session


 Thanks for the info.  What exactly is this cURL program?  Is it something
I
 can run from a linux command line or a program I can download?  Anyway, I
 really appreciate the info!

It's like wget, a command line http client.

Another thing to look at is perhaps tweaking the log files on the host (for
apache, that would be access.log) to try and get request information out of
it.

But, either way, get the request details nailed down and the rest falls in
place.

Regards,

Will Hartung
([EMAIL PROTECTED])




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Simulating a browser session

2003-01-16 Thread Will Sargent
You could try using the HTTPClient library:
http://www.innovation.ch/java/HTTPClient/

or you can try using HTTPUnit: http://httpunit.sourceforge.net/

Will.

 -Original Message-
 From: Jason Pyeron [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 16, 2003 10:30 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Simulating a browser session


 Brandon,

 9 times out of 10 it is my cookie, or ssl, or other non-complient
 logic in
 my code, but otherwise, this may be you, ...

 1 times out of 10 when I have trouble interacting with a
 webapplication, it is caused by the useragent setting i pass.

 My steps to diagnose my problems are:

 1: Try to work with the web app in internet explorer 5.5
 2: trace interactions with site using cURL acting as IE5.5
 3: trace interactions with site using cURL acting as the suspect agent

 my favorite usage is:
  curl -viLsA 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0;
 .NET CLR 1.0.3705)' url

 -F for form values
 -b  -c for cookies
 -k for ssl issues
 -u for user auth
 -o for output file ( i like the screen better )



 On Thu, 16 Jan 2003, Brandon Cruz wrote:


 Does anyone have familiarity with using JAVA to simulate a browser session
 and navigate multiple pages in a https based web application, storing
 session cookies, doing form posts, etc.?

 We are trying to do an https post, but the application is acting as if the
 parameters are never passed.

 We have done the exact same thing before at another website with no
 problems.

 The only difference is that the one that does not work is using session
 cookies, although we are able to successfully get and set the cookies.

 In both situations, the web application we are trying to navigate is ASP
 based.

 We are trying to integrate one of our partners applications to ours and
 could really use any information, web pages to reference, anything.  We're
 out of ideas.

 Thanks in advance and sorry for the off topic post, please reply to me
 directly.

 Brandon



 --
 To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron   http://www.pyerotechnics.com   -
- Owner  Lead  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)   500 West University Parkway #1S -
- +1 410 467 2266 (f)   Baltimore, Maryland  21210-3253 -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and
notify the sender immediately.  Any other use of the email by you
is prohibited.






--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Simulating a browser session

2003-01-16 Thread Jason Pyeron

cURL can be obtained from http://curl.haxx.se/

for windows, cygwin, linux, etc.

-jason

On Thu, 16 Jan 2003, Brandon Cruz wrote:

Jason,

Thanks for the info.  What exactly is this cURL program?  Is it something I
can run from a linux command line or a program I can download?  Anyway, I
really appreciate the info!

Brandon

-Original Message-
From: Jason Pyeron [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 16, 2003 12:30 PM
To: [EMAIL PROTECTED]
Subject: Re: Simulating a browser session


Brandon,

9 times out of 10 it is my cookie, or ssl, or other non-complient logic in
my code, but otherwise, this may be you, ...

1 times out of 10 when I have trouble interacting with a
webapplication, it is caused by the useragent setting i pass.

My steps to diagnose my problems are:

1: Try to work with the web app in internet explorer 5.5
2: trace interactions with site using cURL acting as IE5.5
3: trace interactions with site using cURL acting as the suspect agent

my favorite usage is:
 curl -viLsA 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; .NET CLR
1.0.3705)' url

-F for form values
-b  -c for cookies
-k for ssl issues
-u for user auth
-o for output file ( i like the screen better )



On Thu, 16 Jan 2003, Brandon Cruz wrote:


Does anyone have familiarity with using JAVA to simulate a browser session
and navigate multiple pages in a https based web application, storing
session cookies, doing form posts, etc.?

We are trying to do an https post, but the application is acting as if the
parameters are never passed.

We have done the exact same thing before at another website with no
problems.

The only difference is that the one that does not work is using session
cookies, although we are able to successfully get and set the cookies.

In both situations, the web application we are trying to navigate is ASP
based.

We are trying to integrate one of our partners applications to ours and
could really use any information, web pages to reference, anything.  We're
out of ideas.

Thanks in advance and sorry for the off topic post, please reply to me
directly.

Brandon



--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron   http://www.pyerotechnics.com   -
- Owner  Lead  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)   500 West University Parkway #1S -
- +1 410 467 2266 (f)   Baltimore, Maryland  21210-3253 -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and
notify the sender immediately.  Any other use of the email by you
is prohibited.






--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron   http://www.pyerotechnics.com   -
- Owner  Lead  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)   500 West University Parkway #1S -
- +1 410 467 2266 (f)   Baltimore, Maryland  21210-3253 -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain 
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and 
notify the sender immediately.  Any other use of the email by you 
is prohibited.




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]