Jump to content

ao39498

Members
  • Posts

    1
  • Joined

  • Last visited

Posts posted by ao39498

  1. website login

    when you attempt to login with username and password, either scenario will happen:
    a) providing incorrect login credentials will show username and password in post web request that appears to be encrypted client side
    b) providing correct login credentials will oddly not show anything in post web request

    host request:
    screenshot-2.png

    post data request:
    screenshot-1.png

    encrypt:
    screenshot-3.png

    looking at the javascript sourcecode, it goes and encrypts the value.. the value for username and password is always different which makes me believe there might be some sort of timestamp involved.

    I want to login to this website using python script, which I think I have to encrypt these values in the same format. Could anyone attempt to login and give their opinion on how I can approach this? The encrypt function is obfuscated?

×
×
  • Create New...