website login
when you attempt to login with username and password, either scenario will happen:
a) providing incorrect login credentials will show username and password in post web request that appears to be encrypted client side
b) providing correct login credentials will oddly not show anything in post web request
host request:
post data request:
encrypt:
looking at the javascript sourcecode, it goes and encrypts the value.. the value for username and password is always different which makes me believe there might be some sort of timestamp involved.
I want to login to this website using python script, which I think I have to encrypt these values in the same format. Could anyone attempt to login and give their opinion on how I can approach this? The encrypt function is obfuscated?
Rare
