Solved

Capture URL

Posted on 2013-01-19
3
410 Views
Last Modified: 2013-01-19
Hello All
i have a Biometric finger print reader in my office and want to open the door via a shortcut on my desktop

The homepage is accessed Via IP and you can put in your login details and press login or open door which fires the realy for a few seconds allowing the visitor to open the door.

On the home page i have right clicked the button and it does not offer to be opened in a new window so its not a link

I have captured the data via wireshark and i can see the HTTP traffic and if i look inside the packet i can see my username and password in text form.

how do i take this and test the URL directly to tell the device to open the door as if it came from a mouse click rather so i can add it as a shortcut with the exact open URL

some wireshark data with the password etc changed is below

Full request URI: http://192.168.1.1/dyn
Line-based text data: application/x-www-form-urlencoded
login=&username=123456&password=123456&button=Open+Door

Any thoughts or am i missing something?
Cheers
0
Comment
Question by:Seanie_
  • 2
3 Comments
 
LVL 2

Accepted Solution

by:
EndreCz earned 500 total points
ID: 38796209
Hi,

First of all it highly depends on the server side, whether you can bypass that page or not.

If the server accepts GET requests, then the following URL should work:

http://192.168.1.1/dyn?login=&username=123456&password=123456&button=Open+Door

Good luck!

Endre
0
 

Author Comment

by:Seanie_
ID: 38796227
Oh excellent.
thank you so much now i can really show this device off.
Thanks a million.
0
 

Author Closing Comment

by:Seanie_
ID: 38796228
Excellent thank you so much
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Introduction One of the frequent application design questions goes something like this: "How can I confirm when a client registers on my web site?" The registration might be for general use of a self-administered site like a forum, or for attend…
A Change in PHP Behavior with Session Write Short Circuit (http://php.net/manual/en/book.session.php#116217) (Winter 2014)** With the release of PHP 5.6 the session handler changed in a way that many think should be considered a bug.  See the note …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now