Auto login plugin doesn't fill <select> tag
Hi guys,
I tried to set up the auto login plugin without success. Tha
problem seems to be a select tag within the login mask.
i wrote a test html case with a form that contains such a tag with a lot of items and configured the auto plugin to change the selected item.
[!] Session: Found login form: form:post:http://192.168.56.101:8080/:[["Login", ""], ["form_Employee", "GB"], ["form_Password", ""], ["form_UID", ""]]
[!] Session: Updated form inputs: {"form_UID"=>"userNAME", "form_Password"=>"changeMe", "form_Employee"=>"AY", "Login"=>""}
[!] Session: Submitting form.
[!] Browser: fire_event: submit ({:inputs=>{"form_UID"=>"userNAME", "form_Password"=>"changeMe", "form_Employee"=>"AY", "Login"=>""}}) <form action="http://192.168.56.101:8080" method="post">
[!] Client: ------------
[!] Client: Queued request.
[!] Client: ID#: 1
[!] Client: Performer:
[!] Client: URL: http://192.168.56.101:8080/
[!] Client: Method: post
[!] Client: Params: {}
[!] Client: Body: form_Employee=GB&form_UID=userNAME&form_Password=changeMe
As you can see the default value for form_Employee is GB. The browser logs that the form_Employee is changed to => "AY" but in fact on the last line the request body shows, that form_Employee contains the old default value, which is "GB".
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Tasos Laskos on 18 Nov, 2014 02:33 PM
Hey Holger,
I think I know what's wrong and I'm looking into this right now.
In the meantime, consider using the
login_scriptplugin via the HTTP request method as in the example in its description:Cheers
Support Staff 2 Posted by Tasos Laskos on 18 Nov, 2014 02:43 PM
I just updated the relevant KB article to include the new
login_scriptplugin: http://support.arachni-scanner.com/kb/general-use/logging-in-and-ma...3 Posted by Holger on 18 Nov, 2014 03:44 PM
Thanks a lot :)
Support Staff 4 Posted by Tasos Laskos on 19 Nov, 2014 01:23 AM
No problem. Nightlies are up and include the fix, please test it and let me know.
Cheers
5 Posted by Holger on 19 Nov, 2014 04:40 PM
Yep,
that fix did it. Could successfully login :)
6 Posted by Holger on 19 Nov, 2014 04:47 PM
Now i am getting during the scan. Doesn't seems to be critical but it is also relateted to select tags and watir
Support Staff 7 Posted by Tasos Laskos on 19 Nov, 2014 05:02 PM
Yeah that sounds about right, it's not critical at all, doesn't even affect the scan. I think I better downgrade this to a debugging message rather than an error one. :)
Thanks fore the feedback.
Cheers
Tasos Laskos closed this discussion on 19 Nov, 2014 05:02 PM.