Making a post request using curl and compare the results

privateloader · 07-19-2015, 08:09 PM

Please i need help on this one, i want to make an http post using php curl function and cache that page. After that i want to search for the presence of a specific line. I know that buffering the page is not reliable but i want to give a try.

I know that this works, i had this piece of code working a few years back i eventually lost it.

Thanks in Advance

w00t · 07-19-2015, 08:13 PM

Do you actually mean you want to cache it, or do you just need it in a variable so you can parse it?

Oni · 07-19-2015, 08:15 PM

I remember I wrote a script that did something similar when I discovered this vulnerability:
https://sinister.li/Thread-Tutorial-...s-4-1-to-5

Unfortunately, I no longer have it. I'm sure @Reiko or @roger_smith might know.

Reiko · 07-20-2015, 01:16 PM

returntransfer?

Crypt · 07-20-2015, 01:32 PM

http://www.hackingwithphp.com/15/10/3/th...rl-options

Reiko · 07-20-2015, 01:39 PM

(07-20-2015, 01:32 PM)Crypt Wrote: http://www.hackingwithphp.com/15/10/3/th...rl-options

CURLOPT_RETURNTRANSFER

privateloader · 07-20-2015, 08:53 PM

Using curl.exe won't work i think as i want to make a post request and search for a text string, after the post, if the text string exists then echo "Yes it is present" if not echo "No it isn't present".

It will be very good if it was possible in batch, any sugestions?

Dyme · 07-20-2015, 09:20 PM

Since no one will do it for you:

PHP Code:
<?php
$string = "STRING TO SEARCH FOR";
$ch = curl_init();
$curlConfig = array(
    CURLOPT_URL            => "URL TO SEND POST REQUEST TO",
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POSTFIELDS     => array(
        'field1' => 'some data',
        'field2' => 'some other data',
    )
);
curl_setopt_array($ch, $curlConfig);
$result = curl_exec($ch);
if (strpos($result, $string) !== false) {
    echo "true\n";
}
else
{
    echo "false\n";
}
curl_close($ch);
?>

I'm pretty sure that's what you are looking for. It will print true if the string is found in the post request response, and print false otherwise. Shout out Stackoverflow.

privateloader · 07-22-2015, 12:39 AM

Thanks, i got the code working Smile

Step 2: How do i add a form where the string becomes a user input and add multiple sites.

(This is my first project in this language)

Crypt · 07-22-2015, 12:44 AM

(07-22-2015, 12:39 AM)privateloader Wrote: Thanks, i got the code working

Step 2: How do i add a form where the string becomes a user input and add multiple sites.

(This is my first project in this language)

Why are you calling it "your" first project when all you're doing is getting spoonfed code?

You can make the string come from user input by doing one of these two:
$argv[1] if you're executing it inside a terminal.
$_REQUEST['anything'] if you're accessing it on a web interface.

If this is your project, you should be figuring these things out, not having others do it for you. You should do the multiple sites part on your own.