Login to ASP.net site with WinHTTP

iFFgen · June 14, 2016

Good day.
I would be very grateful if somebody would help me to understand how can I login to the site "https://www.asos.com" using library WinHTTP.

I've tried like this (but there is no response):

#include "WinHttp.au3"

Local $sDomain = 'www.asos.com'
Local $sPage = 'pgecustlogin.aspx'
Local $sLogin = 'login'
Local $sPassword = 'password'

Local $hOpen = _WinHttpOpen()
Local $hConnect = _WinHttpConnect($hOpen, $sDomain, $INTERNET_DEFAULT_HTTPS_PORT)
Local $sResponse = _WinHttpSimpleFormFill($hConnect, _
    $sPage, _
    'EmailAddress', $sLogin, _ ; <input id="EmailAddress" />
    'Password', $sPassword) ; <input id="Password" />
ConsoleWrite('! Response > ' & $sResponse & @LF)

_WinHttpCloseHandle($hConnect)
_WinHttpCloseHandle($hOpen)

In this version I get html-text and headers, but I don't know what to do with it.

#include "WinHttp.au3"

Local $sDomain = 'www.asos.com'
Local $sPage = 'pgecustlogin.aspx'
Local $sLogin = 'login'
Local $sPassword = 'password'

Local $hOpen = _WinHttpOpen()
Local $hConnect = _WinHttpConnect($hOpen, $sDomain)
Local $hRequest = _WinHttpOpenRequest($hConnect, 'GET', $sPage, 'HTTP/1.1', $WINHTTP_NO_REFERER, $WINHTTP_DEFAULT_ACCEPT_TYPES, $WINHTTP_FLAG_SECURE)
_WinHttpSendRequest($hRequest)
_WinHttpReceiveResponse($hRequest)

Local $sHeaders = _WinHttpQueryHeaders($hRequest)
Local $sData = '', $sChunk
If _WinHttpQueryDataAvailable($hRequest) Then
    While 1
        $sChunk = _WinHttpReadData($hRequest, 1)
        If Not @extended Then ExitLoop
        $sData &= $sChunk
    WEnd
EndIf
ConsoleWrite('! Headers > ' & @LF & $sHeaders & @LF)
ConsoleWrite('! Response > ' & $sData & @LF)

_WinHttpCloseHandle($hRequest)
_WinHttpCloseHandle($hConnect)
_WinHttpCloseHandle($hOpen)

Help me please!
And thanks in advance!

Edited June 17, 2016 by iFFgen

trancexx · June 14, 2016

This could be my fault. I haven't anticipated web developers doing tricks LOL.

Find __WinHttpAttribVal() function inside the UDF and change this line:

Local $aArray = StringRegExp($sIn, '(?i).*?(\A| )\b' & $sAttrib & '\h*=(\h*"(.*?)"|' & "\h*'(.*?)'|" & '\h*(.*?)(?: |\Z))', 3) ; e.g. id="abc" or id='abc' or id=abc

...to:

Local $aArray = StringRegExp($sIn, '(?i).*?(\A| )\b' & $sAttrib & '\h*=(\h*"(.*?)"|' & "\h*'(.*?)'|" & '\h*(.*?)(?: |\Z))', 1) ; e.g. id="abc" or id='abc' or id=abc

Then give it a try.

iFFgen · June 14, 2016

On 14.06.2016 at 3:53 PM, trancexx said:

Then give it a try.

If I try 1-st version with _WinHttpSimpleFormFill there is no response.

Can you explain how can I do this?

Login and password data transferring not in url string but in Form Data:

idsrv.xsrf=t42__g36w3-i4VHcZVJLkaYoll5PuumW5JspMJXEZAkoPnBxTNgO9KOBZGMqO_-IiX6v9eiHjaxWyxG0Ghmtt-w9Rvk&Username=login&Password=password

After submitting this form must be redirection to: https://my.asos.com/identity/wsfed?wa=wsignin1.0&wtrealm=https%3a%2f%2fasoseuncuside.......

On 14.06.2016 at 3:53 PM, trancexx said:

Local $aArray = StringRegExp($sIn, '(?i).*?(\A| )\b' & $sAttrib & '\h*=(\h*"(.*?)"|' & "\h*'(.*?)'|" & '\h*(.*?)(?: |\Z))', 1) ; e.g. id="abc" or id='abc' or id=abc

This returns 0 or 1, but not an array. Or I missing something?

Edited June 17, 2016 by iFFgen

trancexx · June 15, 2016

15 hours ago, iFFgen said:

This returns 0 or 1, but not an array. Or I missing something?

Documentation says it returns "array of matches".

iFFgen · June 15, 2016

8 hours ago, trancexx said:

Documentation says it returns "array of matches".

Yes. I'm sorry, it's my fault.

Form is filled with _WinHttpSimpleFormFill and I get html-text of page where exists another form:

Spoiler

<html><head><title>Working...</title></head><body><form method="POST" name="hiddenform" action="https://asoseuncusidentityacs.accesscontrol.windows.net/v2/wsfederation"><input type="hidden" name="wa" value="wsignin1.0" /><input type="hidden" name="wresult" value="<trust:RequestSecurityTokenResponseCollection xmlns:trust="http://docs.oasis-open.org/ws-sx/ws-trust/200512"><trust:RequestSecurityTokenResponse Context="cHI9d3NmZWRlcmF0aW9uJnJtPWh0dHBzJTNhJTJmJTJmc2VjdXJlLmFzb3MuY29tJnJ5PWh0dHBzJTNhJTJmJTJmd3d3LmFzb3MuY29tJmN4PXJtJTNkMCUyNmlkJTNkYXNvc3NlY3VyZSUyNnJ1JTNkJTI1MmZwZ2VjdXN0bG9naW4uYXNweCUyNTNmbHZ1JTI1M2RhSFIwY0hNNkx5OTNkM2N1WVhOdmN5NWpiMjB2WVdOamIzVnVkQzl3WjJWaFkyTnRaVzUxTG1GemNIZzElMjZjaGVja291dCUzZGZhbHNlJTI2bGFuZyUzZGVuLUdC0"><wsp:AppliesTo xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://asoseuncusidentityacs.accesscontrol.windows.net/</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><trust:RequestedSecurityToken><EncryptedAssertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData Type="http://www.w3.org/2001/04/xmlenc#Element" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" /><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><e:EncryptedKey xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /></e:EncryptionMethod><KeyInfo><o:SecurityTokenReference xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><X509Data><X509IssuerSerial><X509IssuerName>CN=Production Certificate Authority, OU=Identity, O=ASOS, L=London, C=GB</X509IssuerName><X509SerialNumber>123317275102005671607783314604906800946</X509SerialNumber></X509IssuerSerial></X509Data></o:SecurityTokenReference></KeyInfo><e:CipherData><e:CipherValue>SEVEU1cDSulWnm5c+JN8C463sptEMj6jp+OTG4R25uIKqRfp3PFFCYIsZPpiUwqSAnUHAFmJO9pfIHXawcRc4T5UnqXRIwZAqwDwAySNHCCnwuN1WhqhK3suzKvz37qdPqpaCqHuNxWHhzribukKpbpZAeRt+su+38Iow5QGdFG8s8JWELKnQ5u5ZX9dMS2jw2zB5btzvW9MdEBMrIDNz/aOScNAVjPtmmDXJC0vLM6PaDeXzNcHXEw7F8FqAy0pEljYfKGLx8r8in40wEU9Avw6GoQLfxW1TqWR24B00eZ07AI1Z3ORPR/kVYsUGZ2om+BXLnPhoIpQZ27xg68qyg==</e:CipherValue></e:CipherData></e:EncryptedKey></KeyInfo><xenc:CipherData><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></EncryptedAssertion></trust:RequestedSecurityToken></trust:RequestSecurityTokenResponse></trust:RequestSecurityTokenResponseCollection>" /><input type="hidden" name="wctx" value="cHI9d3NmZWRlcmF0aW9uJnJtPWh0dHBzJTNhJTJmJTJmc2VjdXJlLmFzb3MuY29tJnJ5PWh0dHBzJTNhJTJmJTJmd3d3LmFzb3MuY29tJmN4PXJtJTNkMCUyNmlkJTNkYXNvc3NlY3VyZSUyNnJ1JTNkJTI1MmZwZ2VjdXN0bG9naW4uYXNweCUyNTNmbHZ1JTI1M2RhSFIwY0hNNkx5OTNkM2N1WVhOdmN5NWpiMjB2WVdOamIzVnVkQzl3WjJWaFkyTnRaVzUxTG1GemNIZzElMjZjaGVja291dCUzZGZhbHNlJTI2bGFuZyUzZGVuLUdC0" /><noscript><p>Script is disabled. Click Submit to continue.</p><input type="submit" value="Submit" /></noscript></form><script language="javascript">window.setTimeout('document.forms[0].submit()', 0);</script></body></html>

I'm trying to fill this form with:

$hConnect = $sResponse
Local $sResponse = _WinHttpSimpleFormFill($hConnect, $hOpen, 'index:0')
ConsoleWrite('! Response > ' & $sResponse & @LF & @LF)
_WinHttpCloseHandle($hConnect)

and I'm getting another html-page with http error 400

Spoiler

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head id="Head1"><title>

Error

</title>
<link rel="Stylesheet" href="/Areas/SSOManagement2/Theme/acs.css" type="text/css" />
<script type="text/javascript">
function on_body_load() {
//an empty function
}
</script>
</head>

<body onload="on_body_load()">

<h2 id="ErrorInfo">
An error occurred while processing your request.
</h2>
<div id="errorDetails">
<table class="list-table firstColumnDontWrap">
<tr>
<td class="grid">
<b>HTTP Error Code:</b>
</td>
<td id="HttpStatusCode" class="grid">
400
</td>
</tr>

<tr>
<td class="grid">
<b>Message:</b>
</td>
<td id="ErrorMessage1" class="grid">
ACS20001: An error occurred while processing a WS-Federation sign-in response.
</td>
</tr>

<tr>
<td class="grid">
<b>Trace ID:</b>
</td>
<td id="TraceId" class="grid">
2051950d-fd16-4b84-a640-53ba9de9bce1
</td>
</tr>
<tr>
<td class="grid">
<b>Timestamp:</b>
</td>
<td id="Td1" class="grid">
2016-06-15 13:13:57Z
</td>
</tr>

</table>
</div>

</body>
</html>

What I'm doing wrong?

Sign In

Login to ASP.net site with WinHTTP

Recommended Posts

iFFgen

trancexx

iFFgen

trancexx

iFFgen

Create an account or sign in to comment

Create an account

Sign in

Recently Browsing 0 members

Browse

AutoIt Resources

Release

Beta