Advanced PHP/cURL techniques

[cadmium]

After repeat attempts at making a script that automatically logs in to myspace, I found a script that works:
Login To My MySpace Account Via PHP Script?! (View Single Post)

I still want to know how he figured out which HTTP headers to inject and how he figured out using collect.myspace instead of login.myspace.

Is it just trial and error or is there a process? PHP/cURL gurus help me out.

 

[lerchmo]

you can look at the headers
livehttpheaders and tamper data are great extention for firefox..

 

[cadmium]

Thanks lerchmo. The tamper data plugin is awesome.

 

[illusion]

Just use Snoopy

 

[shaggz]

Another valuable tool is ethereal

Ethereal: A Network Protocol Analyzer

 

[Someone]

He went a little overboard with the headers. cURL will write the headers he manually wrote for you.

 

[cadmium]

He went a little overboard with the headers. cURL will write the headers he manually wrote for you.

Have you ever tried php/curl with myspace?

 

[cadmium]

The only thing is that I have no idea how he figured out to inject the HTTP headers. I tried it without the header injection and it doesn't work.

I'm using ethereal and it's not showing the same headers on a successfull login. Did this guy use trial and error, or am I missing something?

 

[shaggz]

The only thing is that I have no idea how he figured out to inject the HTTP headers. I tried it without the header injection and it doesn't work.

I'm using ethereal and it's not showing the same headers on a successfull login. Did this guy use trial and error, or am I missing something?

Myspace recently started doing HTTPS logins, so in ethereal the login traffic will be encrypted and you can't see the critical POST values. If you use FireFox, and the Live HTTP Headers plugin, you can see them. Live HTTP Headers can access them before they are encrypted.