Using cURL to Access Url, then Submit Data

Question

I am trying to:

access $url
Insert the (2) values, of the two indices into the corresponding input fields (username,password) then submitting.
finally grab the response from inputting and submitting in #2 and outputting the response.

I have the following code:

  <?php
# get url to form
$url = "http://localhost/exploitme2/index.php?page=login.php";
$ch = curl_init($url); # initialize that form

#run value of $_POST variable in form fields from above url.
$params = array("'' or '1'='1'", "'' or '1'='1'");

curl_setopt($ch, CURLOPT_POST, 1);  
curl_setopt($ch, CURLOPT_POSTFIELDS, $params);  #set parameter $_POST fields
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); 
$result = curl_exec($ch);

## echo the result from cURL 'ing
echo $result;

curl_close($ch);
?>

I get this error:

 syntax error, unexpected '=', expecting ')'

on this line:

$params = array($_POST['username']=>'' or '1'='1', 
                $_POST['password']=>'' or '1'='1');

Are you trying to create a script to brute force a login form? The word expolitme2 sets off a red flag for me =o\ — user1592648
– user1592648, Commented Dec 27, 2012 at 4:08

Hanky Panky · Accepted Answer · 2012-12-27 04:24:52Z

1

In technical terms, this is all just 1 step operation and not 3. You have already completed all those 3 steps. When you post those values to the above url then your result will be stored in your $result variable as per your code, just need to return / display it. for cURL it is not like you have to visit a url first and then submit next, if you know the field names and the action url then you can do all those 3 things in 1 step like you have already done

try an echo for this variable

$result = curl_exec($ch);
**echo $result;**
curl_close($ch);

Ok let me clearify some confusions here

1) You don't have to specify the variables in $_POST array. Your cURL POST variables can be any. They don't have to be in $_POST.

2) You have to post the data to the form's action url and not its own url, (unless ofcourse both are same)

So for 1 your code should be like

$params = array("'' or '1'='1'", "'' or '1'='1'");

edited Dec 27, 2012 at 4:24

answered Dec 27, 2012 at 4:14

Hanky Panky

46.9k9 gold badges76 silver badges95 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

CodeTalk Over a year ago

Mind showing a code sample here? I appreciate the understanding you've provided so far.

CodeTalk Over a year ago

Please see my updated answer. My array value's for $_POST['username'] and $_POST['password'] wont work because the actual value I'm trying to input is *** ' or '1'='1 *** but the single quotes are throwing it off. How can I do this?

CodeTalk Over a year ago

please see updated code, it now will not load the page at all stating: "The connection was reset"

Collectives™ on Stack Overflow

Using cURL to Access Url, then Submit Data

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related