Re: Getting past authentication to Flickr/Yahoo

2010-05-06 Thread lsacco
At last...success! A buddy of mine turned me onto Tamper Data, which lead me to the right combination. Here it is for others that might find this useful: String strU = StringUtils.substringBetween(_strGetRspBody, input type=\hidden\ name=\.u\

Re: Getting past authentication to Flickr/Yahoo

2010-05-05 Thread lsacco
olegk wrote: Yahoo as well as other high profile sites intentionally make it very difficult to script their login process. Yeah, no kidding! Here's my code...I basically combed there form and create new NameValuePairs for them. They also have hash function onSubmit to MD5 the password

Re: Getting past authentication to Flickr/Yahoo

2010-05-05 Thread lsacco
John Smith-151 wrote: In Wireshark : Show the capture options - Capture filter - tcp port http or host target_ip I think it'll help But how can you use Wireshark when the login site is HTTPS. Wireshark can only sniff traffic in the clear unless you have the private key for the Web

Re: Getting past authentication to Flickr/Yahoo

2010-05-04 Thread lsacco
to hack their form in order to passthru the login page. Anybody attempt this? sebb-2-2 wrote: I suggest you use a browser addon to log the HTTP requests which are needed. Alternatively, use a protocol analyser such as Wireshark. On 03/05/2010, lsacco occ...@gmail.com wrote: I've been