arachni login_script and two factor auth
Hey,
I was trying to force arachni to login through two factor
authentication, but I'm stuck a bit.
The login looks something like this:
--1st step user is asked for the surname and customerid
--2nd step user is asked for his password AND (i.e) 2nd and 6th
letters of his secret phrase.
As you'd probably guessed the tricky part is with the letters,
that are dynamic.
What would be the best way to approach this?
thanks!
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Tasos Laskos on 22 Sep, 2015 01:46 PM
Hello,
I guess you could grab the asked character positions for step 2 from the page's HTML code (
browser.html) and fill-in the appropriate characters, right?Are you familiar with Ruby? If so you should have no problem implementing this.
Otherwise you can contact me in private (tasos.laskos[at]arachni-scanner.com) with all the details and I can help you out.
Cheers
2 Posted by vilius on 23 Sep, 2015 06:21 AM
Well I've tried a bit, but probably will be faster to shoot you an email.
Ok, I'm writing one now.
thanks!
Support Staff 3 Posted by Tasos Laskos on 30 Sep, 2015 02:34 PM
Resolved over e-mail.
Tasos Laskos closed this discussion on 30 Sep, 2015 02:34 PM.