400 Bad request on config.

Discussion in 'Cracking Discussions & Help Forum' started by NicePanda, May 21, 2015.

  1. NicePanda

    NicePanda Basic Member

    Messages:
    448
    Likes:
    110
    Ratio:
    0.17
    <div>So i want to make a config for the site hola.org:</div>
    <div>&nbsp;</div>
    <div>i looked in httpfox how to site authenticated: and it is like this</div>
    <div>&nbsp;</div>
    <div>1st: it checks if the email exists: &nbsp;via this url https://hola.org/users/check_email?email=&lt;USER&gt;</div>
    <div>
    </div>
    <div>&nbsp;</div>
    <div>2nd: it will like check the credentials via this url https://hola.org/users/auth/basic/check_credentials</div>
    <div>
    </div>
    <div>&nbsp;</div>
    <div>and 3rd : it will check a 3rd time and redirect to the site index: https://hola.org/users/auth/basic/signup?followed by redirect to https://hola.org/?login=1</div>
    <p>
    </p>
    <div>&nbsp;</div>
    <div>&nbsp;</div>
    <div>you can see all this here: http://i.gyazo.com/cee06d5304303c467bbbffc1524699af.png</div>
    <div>
    </div>
    <div>&nbsp;</div>
    <div>so i put all this in sentry: http://i.gyazo.com/b37f18633a3b955c55ccb3f6cc088ccb.png</div>
    <div>
    </div>
    <div>&nbsp;</div>
    <div>but when i try it out in debug i get 400 bad request when it redirects to https://hola.org/?login=1</div>
    <div>
    </div>
    <div>&nbsp;</div>
    <div>the debug: http://paste2.org/kpCUzW8e</div>
    <div>
    </div>
    <div>&nbsp;</div>
    <div>can somebody tell me what i am doing wrong? i know there are some good config makers around here :D /></div>
    <div>&nbsp;</div>
    <div>-edit i dont know why its showing my text so wierd :o</div>
     
  2. MR.ViPeR

    MR.ViPeR Well-Known Member Retired Staff

    Messages:
    3,758
    Likes:
    2,195
    Ratio:
    2.87
    • Make Sure Redirect URL Is Working
    • Try To Make The Same HTTP Header Like The Original One( When You Go To That Redirect Page In Browser ) For Redirect URL
    • Maybe The Problem Is From Cookie Which That Sent In Form Redirect Header
    • Maybe You Don't Send Some Parameters In Redirect URL Or Redirect Form Header

    I Have Not Checked The Site, Just See Your Debug Logs
     
  3. NicePanda

    NicePanda Basic Member

    Messages:
    448
    Likes:
    110
    Ratio:
    0.17
    <p>i think it is the cookie its missing some cookie. it only sends &nbsp;user= and&nbsp;connect.sid=. It also needs holawuuid=,_ga='_gat= but how to add? :( should i pm the config to you mr.viper so you can check?</p>
     
  4. Ripcord

    Ripcord Basic Member

    Messages:
    730
    Likes:
    314
    Ratio:
    0.12
    Whats with the html tags o.o
     
    Animal likes this.
  5. NicePanda

    NicePanda Basic Member

    Messages:
    448
    Likes:
    110
    Ratio:
    0.17

Share This Page