suicidegirls problems any advise?

Im not real good at form sites to begin with im having trouble finding a url to brute force using form@.

the source suggests the link is suicidegirls.com/login this redirects back to the main page
There appears to be a login form on every page , when form@ does find the data this is what i get

html code of login page
http://rapidshare.de/files/36413638/data.txt.html

form action: /login/
Form Method: post
username fields: username;password
password fields:
other fields: action=process_login&submit.x=3&submit.y=10
Cookies:

when i use this data all i get is proxy/site blocking responces
also i probably should move password into the password field hu


any help would be appreciated its been a while since iv done any of this

[tchia]

Originally Posted by mickahcs

also i probably should move password into the password field hu

I think that would probably be a good idea : )

Originally Posted by tchia

I think that would probably be a good idea : )

lol yeah sorry i did acually do that. still having problems though.

any anon proxys with connect should work?

[sPlico]

Try switching proxies untill you get a valid reply. Suicide girls has a very simple form.

[tchia]

Also, you may want to modify your "other fields" post data. When I run it through LiveHTTPHeaders it shows it should read:


other fields: action=process_login&submit.x=3&submit.y=10&submit=submit

rather than just:

other fields: action=process_login&submit.x=3&submit.y=10

thanks a lot guy's you have helped heaps!

[sPlico]

Originally Posted by tchia

Also, you may want to modify your "other fields" post data. When I run it through LiveHTTPHeaders it shows it should read:


other fields: action=process_login&submit.x=3&submit.y=10&submit=submit

rather than just:

other fields: action=process_login&submit.x=3&submit.y=10

I agree. Plus, most likelly you can omit submit.x=38&submit.y=10 since this is a random field usually that just changed from session to session to see is the attack automated, but i believe form@ refreshes this automatically itself.

i will try your advise and get back to ya's

once again thanks for your help

man this is starting to give me the shits.

i think it must be my proxies im using charon
using several proxies tested against the site all have connect ability.

they are getting blocked.

either of guys able to get a responce?

[sPlico]

You don't need connect ability to crack porn. You just need annonimous proxies.