It's done here with another technique but it's the same content that is send.
#Scriptable javascript how to
See also: How to generate UserLoginType for login request I already copied all headers that firefox also send and I did POST and GET requests to my local webserver, to see if the passed form values comes correct to the webserver.
#Scriptable javascript code
When posting these values to the login url, I expect to get the status code 302 with an redirect to Loading the login page works as expected. Sid = cookies.substring(5, cookies.indexOf(' '))
For example, if the XSS context is into the href attribute of an anchor tag, you can use the javascript pseudo-protocol to execute script. Scriptable uses Shortcuts to handle Siri voice commands, which has no support for parameters. Here, you can execute JavaScript without needing to terminate the attribute value. Resp = resp.substr(resp.indexOf('value="') + 7) Ĭsrf_token = resp.substr(0, resp.indexOf('"')) Ĭonsole.log("Found csrf_token: " + csrf_token) Ĭookies = CookieValues.join(' ') + ' isCookieAllowed=true' Ĭonsole.log("Found cookies: " + cookies) Sometimes the XSS context is into a type of HTML tag attribute that itself can create a scriptable context. Resp = resp.substr(resp.indexOf('UserLoginType_csrf_token'), 500) Req.body = "_SID=" + sid + "&UserLoginType%5Balias%5D=" + username + "&UserLoginType%5Bpassword%5D=" + password + "&UserLoginType%5Blogindata%5D=&UserLoginType%5Bcsrf_token%5D=" + csrf_token Ĭonsole.log() // This should be 302 but is 200 'Content-Type': 'application/x-www-form-urlencoded', 'Accept': 'text/html,application/xhtml+xml,application/xml q=0.9,image/webp,*/* q=0.8', These must be at the very top of the file. The main goal of this tutorial is to provide a starting guide for creating Scriptable widgets. You can use these scripts to automate different things on your device and also display the script in an iOS home screen widget. Here is my code: // Variables used by Scriptable. With Scriptable, you can create JavaScript scripts and run them on your iOS device. I tried to create the needed Http GET and POST requests to login into my account and than to read the needed values, but I failed already with the login. To create this widget I want to use Scriptable I want to create a widget for iOS that shows my mobile traffic usage.
0 kommentar(er)
