Is This Possible?

Layhooo

Newbie
Joined
Jun 2, 2013
Messages
23
Reaction score
4
Hello blackhatworld!

I'd like to know whether or not it's possible to post messages to a textfield of a website without actually having to open the browser. For example, I can make a program which opens the browser and types "ducks" into the google search query and then downloads the source code for the page that google generates, but I'd like to be able to do this without needing to open the browser. Thanks!

(I'm using java for this at the moment but if this is easy in another language I'll just switch to that)
 
Last edited:
Yes.Sure this can be done. Just try to sniff what's being sent with the browser and mimick that programmatically. I mostly use Visual Basic and/ or PHP for that kinda things. Wireshark or Fiddler to do the sniffing for more complicated things.
WHen you do a search on Google for example,when the search resulst are displayed, you see a very long query-string in your browser's address-bar. You can easily copy that with programming.
 
Thank you guys very much for the fast responses. I'm gonna get to reading! If anyone else has anything to add then please do!

"WHen you do a search on Google for example,when the search resulst are displayed, you see a very long query-string in your browser's address-bar. You can easily copy that with programming."

Yes. Thanks for mentioning that and it's true but using google is not my only intent and other services don't necessarily put information like this in their url's. I will definitely read about what "sniffing" is, however.
 
Last edited:
Make sure you're setting the headers up with Google and friends - user agent etc
 
The two most used ways to send information to a page are GET and POST.
GET sends the information along with the url, like on google searches, POST information is not visible in the url and you have to read the whole request send to see it. A nice firefox plugin that can help you do that is 'Live HTTP Headers'. Check it out.

Also, most sites check the user-agent (a string specifing the name of the program that made the request). You should make your program fake a Chrome or Firefox user-agent in order not to get banned by the site.
 
Tip: install (if you use Firefox) a handy plugin called Firebug, it has a lot of options to show you what's going on below the surface of your browser.
 
Alright thanks guys. I have a lot more questions but I can't ask them because I don't have enough posts... (they require posting url's)
 
Okay check this thread because I posted it here too (not spam):

Or not... I thought I'd be able to post URL's after 15 posts
 
Yea you can simulate the post request with python using the requests library.
 
Install Visual Studio Express for Web (is free from Microsoft) and do a search on google for HTTP Web Requests (HTTP Client) in VB.NET ... What you ask can be done with few lines of code ... it gets "a little" more complicated if it require login, cookies, proxies, multithreading and so on :)
 
Hello blackhatworld!

I'd like to know whether or not it's possible to post messages to a textfield of a website without actually having to open the browser. For example, I can make a program which opens the browser and types "ducks" into the google search query and then downloads the source code for the page that google generates, but I'd like to be able to do this without needing to open the browser. Thanks!

(I'm using java for this at the moment but if this is easy in another language I'll just switch to that)

Okay, this should be very easy... the posting to textfield part. What I would recommend is using Google Chrome, and open up network tool in the debug console. Once you have that open, submit some random text to the website and you should be able to capture the network request sent.

For instance, it'll probably be a POST request with certain parameters. After you have that, you can just create a socket connection with Java, or any other script language (I would recommend Python or Ruby) to just send the POST request again. Voila.

To the second part of your question. If you're thinking about scraping Google... this is going to be hard. Why?

Google charges to use it's Google API search, therefore they take GREAT measure to ensure that its content can't be easily scraped. As such, if you ever looked at the Google source code, it's impossible to read and probably impossible to scrape reliably... I've been programming for a while and I sure as hell can't do it :P If you really want Google search results, I'd look into the Google Search API. :)
 
It could be done easy, but there can be a special case where this can be a very hard task!

Remeber that browser execute JavaScript, so, your form can have some hidden functionality to dynamically create some hashes etc. from typed strings and this can be verified after posting at server side. So it is possible to block such automated POST's with veryfing hash, or some other data like session. You can skip it only by exedcuting JavaScript externally or rewriting hash creation algorithm.

Also, first page with form can create some special cookies which can be required at POSTing request.
 
Sorry for late join..

Hello blackhatworld!

I'd like to know whether or not it's possible to post messages to a textfield of a website without actually having to open the browser. For example, ..............
.................................................

did you get what you want?
we are developing it with multiple features i.e. UA + Proxy [w / wo] + OS + Device
plz let us know if you like to join as debug tester

thanks
 
Back
Top