Home → Questions →

arachni login_script and two factor auth

• Edit

vilius

22 Sep, 2015 01:41 PM

Hey,

I was trying to force arachni to login through two factor authentication, but I'm stuck a bit.
The login looks something like this:
--1st step user is asked for the surname and customerid
--2nd step user is asked for his password AND (i.e) 2nd and 6th letters of his secret phrase.

As you'd probably guessed the tricky part is with the letters, that are dynamic.
What would be the best way to approach this?

thanks!

1. Support Staff 1 Posted by Tasos Laskos on 22 Sep, 2015 01:46 PM

   

   Hello,

   I guess you could grab the asked character positions for step 2 from the page's HTML code (browser.html) and fill-in the appropriate characters, right?

   Are you familiar with Ruby? If so you should have no problem implementing this.
   Otherwise you can contact me in private (tasos.laskos[at]arachni-scanner.com) with all the details and I can help you out.

   Cheers

   • Edit

2. 2 Posted by vilius on 23 Sep, 2015 06:21 AM

   

   Well I've tried a bit, but probably will be faster to shoot you an email.
   Ok, I'm writing one now.

   thanks!

   • Edit

3. Support Staff 3 Posted by Tasos Laskos on 30 Sep, 2015 02:34 PM

   

   Resolved over e-mail.

   • Edit

4. Tasos Laskos closed this discussion on 30 Sep, 2015 02:34 PM.