Automatic logon to a website, inspecting the logon process?

SiD the Turtle · 12 Jul 2008 at 20:08

Hi guys,

I'm trying to automatically logon to live.xbox.com as part of the next phase of my gamertag site, so I need to pass through to the site - though my c# application - my log on credentials.

Now automatic logon can be used for nefarious purposes so all the sites that I've found on the subject so far are dodgy and full of 'man-in-the-middle' tools to hijack and inspect traffic.

What I really need is a tool or process that will help me inspect what is POSTed when you hit logon so I can pass that through the app. Any useful, non-nefarious tools out there to help, or alternatively a way of auto-logging on programmatically?

HTMLHugo · 12 Jul 2008 at 20:32

i have a tool at work that might do it, cannot for the life of me remember what its called however otherwise id let you know.

if by monday you havent got any further leads ill try and dig it out the name of it at least.

cant promise it will do what you want as ive never done anything other then install it but i remember it was to do something similar.

ChrisB · 12 Jul 2008 at 20:33

I've always found firefox and livehttpd good for this

http://livehttpheaders.mozdev.org/

Edit: This will only tell you what's being posted mind you. You'll have to do the rest yourself, which is what I do

HTMLHugo · 14 Jul 2008 at 12:54

www.fiddler2.com

ive never installed it tbh so it might be pap.

SiD the Turtle · 14 Jul 2008 at 13:57

Thanks guys, I've tried both of those tools, they do the trick except Live's logon system seems to be quite complex- passing the POST command with what I think is the correct data does not work.

I've gotten around it though, using Firefox's web developer addon I've managed to find the cookie and the keys needed to authenticate with my logon, so in C# (what everything is programmed in) I can recreate the cookie and past it to the web request.

So bingo! I can log into live.xbox.com and get the data I'm after!

Thanks again.