[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 425
  • Last Modified:

Capture URL

Hello All
i have a Biometric finger print reader in my office and want to open the door via a shortcut on my desktop

The homepage is accessed Via IP and you can put in your login details and press login or open door which fires the realy for a few seconds allowing the visitor to open the door.

On the home page i have right clicked the button and it does not offer to be opened in a new window so its not a link

I have captured the data via wireshark and i can see the HTTP traffic and if i look inside the packet i can see my username and password in text form.

how do i take this and test the URL directly to tell the device to open the door as if it came from a mouse click rather so i can add it as a shortcut with the exact open URL

some wireshark data with the password etc changed is below

Full request URI: http://192.168.1.1/dyn
Line-based text data: application/x-www-form-urlencoded
login=&username=123456&password=123456&button=Open+Door

Any thoughts or am i missing something?
Cheers
0
Seanie_
Asked:
Seanie_
  • 2
1 Solution
 
EndreCzCommented:
Hi,

First of all it highly depends on the server side, whether you can bypass that page or not.

If the server accepts GET requests, then the following URL should work:

http://192.168.1.1/dyn?login=&username=123456&password=123456&button=Open+Door

Good luck!

Endre
0
 
Seanie_Author Commented:
Oh excellent.
thank you so much now i can really show this device off.
Thanks a million.
0
 
Seanie_Author Commented:
Excellent thank you so much
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now