Re: Impersonate Login Page

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



On Mon, 15 Aug 2005 10:13:07 -0700, "PokerJoker"
<PokerJoker@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

>I'm wondering if maybe they are explicitly checking "where" the login
>attempt is coming from and blocking it if it isn't what they expect? Is this
>a common practice?
>

I'd suggest using Fiddler [1] to compare what your code sends to the
web site with what a web browser sends. Sometimes it's the littlest
things that make the difference, for instance, I've come across more
than one site that checks the user agent string. If the sites didn't
recognize the user agent they'd simply return a 404 or a 500 code. You
can set your own user agent string to make your request look like an
IE request with the UserAgent property on HttpWebRequest.

[1] http://www.fiddlertool.com/fiddler/

HTH,

--
Scott
http://www.OdeToCode.com/blogs/scott/
.



Relevant Pages

  • Re: [Full-disclosure] Facebook/google+ Cross-Site Content Forgery exploit
    ... facebook from people arbitrarily obtaining one. ... to give a reference of tables and columns in the documentation for FQL. ... my %request; ... In doing so, many use a custom user agent, or have IP ...
    (Full-Disclosure)
  • [Full-disclosure] Facebook/google+ Cross-Site Content Forgery exploit
    ... facebook has been vulnerable to numerous web ... recently purchased websense to attempt to push this vulnerability under ... request with an embedded API key to return a valid XML object. ... In doing so, many use a custom user agent, ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Facebook/google+ Cross-Site Content Forgery exploit
    ... facebook has been vulnerable to numerous web ... recently purchased websense to attempt to push this vulnerability ... only a well-formed HTTP request with an embedded API key to return ... "Feedfetcher-Google" as their user agent. ...
    (Full-Disclosure)
  • Re: WebControl/Cache-Control question
    ... the user agent, provided the user agent understands the header. ... The only thing I'd check is that you're setting this on the correct HTTP re- ... where the browser makes a second request that's separate to fetch the image. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Emulating I. E.6
    ... web site to get ... You can use Mozilla firefox and get the User Agent ... Agent Switcher can be loaded after you close firefox. ... Browser Identification and select IE. for Windows, ...
    (Fedora)