arachni login_script and two factor auth

vilius's Avatar

vilius

22 Sep, 2015 01:41 PM

Hey,

I was trying to force arachni to login through two factor authentication, but I'm stuck a bit.
The login looks something like this:
--1st step user is asked for the surname and customerid
--2nd step user is asked for his password AND (i.e) 2nd and 6th letters of his secret phrase.

As you'd probably guessed the tricky part is with the letters, that are dynamic.
What would be the best way to approach this?

thanks!

  1. Support Staff 1 Posted by Tasos Laskos on 22 Sep, 2015 01:46 PM

    Tasos Laskos's Avatar

    Hello,

    I guess you could grab the asked character positions for step 2 from the page's HTML code (browser.html) and fill-in the appropriate characters, right?

    Are you familiar with Ruby? If so you should have no problem implementing this.
    Otherwise you can contact me in private (tasos.laskos[at]arachni-scanner.com) with all the details and I can help you out.

    Cheers

  2. 2 Posted by vilius on 23 Sep, 2015 06:21 AM

    vilius's Avatar

    Well I've tried a bit, but probably will be faster to shoot you an email.
    Ok, I'm writing one now.

    thanks!

  3. Support Staff 3 Posted by Tasos Laskos on 30 Sep, 2015 02:34 PM

    Tasos Laskos's Avatar

    Resolved over e-mail.

  4. Tasos Laskos closed this discussion on 30 Sep, 2015 02:34 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac