Newest: Castech
Counted: 9838
Solved: Castech 1/6
Posted: whatteaux
Topic: Is this what visibility feels ...

Rankk.org Topic - Using Browser Cookies for curl

[ Reply | Hide sub posts | Back ]

Using Browser Cookies for curl
Posted by Geb. Philosopher 14 on 2020-05-01 22:30:56
I'm trying to do some time sensitive challenges and I wanted to use the cookies from the browser as auth.
This doesn't work in the way I'm trying to do it and the auth I can get from logging in from curl doesn't work in browser.
I can just use curl to log in and go from there but I would be very grateful if someone could explain why this would be the case.
2 +votes | 0 −votes
Using Browser Cookies for curl
Posted by Geb. shortbreak 1613 from on 2020-05-01 23:05:44 Reply
I use Perl for time limited challenges and did not find a solution for this problem. The script would print the page however so it was like the "view source" of a browser and was useable.
Firefox uses a SQL "ish" database in these days and there are some apps that operate on the database. Maybe you could find a way to use them?
I would be eager to hear about a solution for this problem also. I concluded my efforts at the time with a shrug of the shoulders and the "not worth it" thought.
Good Luck!
1 +votes | 0 −votes
536f6d6574696d65732069646c652c6e6576657220626f7265642021
www.google.com
- Re^2: Using Browser Cookies for curl
  Posted by Geb. Simonselles 70 from on 2020-05-02 14:17:03 Reply
  As far as I know, you won't find the needed cookies in this file. Session cookies are not stored.
  
  Instead of answering your "why" question, I have two others for you, Philosopher: "Why some cookies seems to work with firefox and not with curl, or the opposite? How the server knows when it's supposed to work?".
  2 +votes | 0 −votes
- - Re^3: Using Browser Cookies for curl
    Posted by Geb. Philosopher 14 on 2020-05-02 16:54:25 Reply
    So I set on to do some digging and while a server could check for many different things in my case it only seems that the user agent header is what makes the difference.
    2 +votes | 0 −votes
Using Browser Cookies for curl
Posted by Geb. thefinder 11 from on 2020-05-01 23:11:03 Reply
Hi, you need cookies and also other headers. I let you discover which headers you need to identify correctly to rankk!
2 +votes | 0 −votes
Using Browser Cookies for curl
Posted by Geb. khulegu2002 5 from on 2020-05-02 15:03:50 Reply
You can use the network tab in the developer tools in Chrome (also Firefox has this). There you can copy the request with "Copy as cURL".
2 +votes | 0 −votes
Using Browser Cookies for curl
Posted by Geb. Hul3man 104 from on 2020-05-03 07:49:40 Reply
Or, to avoid this whole kerfuffle, write your solutions in JavaScript, like me!
I'm not joking; every timed challenge that I've solved was done though Chrome's console (even the ones involving image manipulation!) Obviously the scrips were sh*tty AF but if you're willing to put that aside...
(a while back I tried switching to Python but I could not figure it out... maybe this thread will provide some hints )
Last edited on 2020-05-03 08:04:46 by Geb. Hul3man
1 +votes | 0 −votes
Something witty here.
Using Browser Cookies for curl
Posted by Geb. Simonselles 70 from on 2020-05-03 13:37:26 Reply
I don't see any fundamental difference using python or curl (shrugging emoji).
In both case, the goal is to access a page while being connected. Of course, the syntax is different, but basically, the idea is the same. How you use the html after that is another story, but the access part is quite similar. If you would like to test it again in python, you can pm me what you did, and I will try to help you!
In my case, when I run one of these programs, I run it on a different session than the browser one and that's all.
I'm currently using python for this, before I used a curl equivalent. The only reason why I changed is my current "favorite" language(s).
I think Philosopher asked this out of curiosity, not because the pain of relogging was unbearable - at least, that is how I understood the question.
In my opinion, the logging problem is not big enough to justify using the Chrome's console. Of course, I'm not saying you shouldn't use it; I'm just saying this thing only is a too small criteria by itself.
Obviously, that's no more than my personal opinion, and I agree with the fact you feel otherwise :)
1 +votes | 0 −votes
- Re^2: Using Browser Cookies for curl
  Posted by Geb. Hul3man 104 from on 2020-05-03 16:55:17 Reply
  My reason is that I literally haven't ever bothered trying to figure out the relevant headers/cookies. I could probably figure it out if I tried. And I'd much prefer Python. But JS has worked for the time being, so..
  1 +votes | 0 −votes
  Something witty here.
Using Browser Cookies for curl
Posted by Geb. Philosopher 14 on 2020-05-03 16:35:59 Reply
When I first looked at it it was really more of a curiosity because I had a workaround.

The benefits of being able to just copy a piece of text and not having to worry about storing your password or entering it (possibly more than once per challenge) are big for me, saved me a lot of time.
I really like curl as it's really simple to use and lets me avoid a lot of the complexity.
I think that you should be able to use whatever you like or makes you happy to solve problems.
2 +votes | 0 −votes

[ Reply | Hide sub posts | Back ]