c# - 通过C#登录网站

标签 c# security authentication web request

我已经尝试了所有我可以在网上找到的关于如何实现这个来登录这个网站的方法。这是最近的失败。

 // I have tried with multiple different URLS this one 
 // and http://www.movable.com/login do not throw errors
 string url = "http://portal.movable.com/";
 string username = "<myusername>";
 string password = "<mypassword>";
 string authTok = @"+HOt3NTkkIAHkMSMvzQisEquhun9xvIG1mHzIEh6CAo=";
 string postData = "utf8=✓" + "&authenticity_token=" + authTok +
      "&user[login]=" + username + 
      "&user[password]=" + password + "&user[offset]=-5";

var container = new CookieContainer();
var buffer = Encoding.UTF8.GetBytes(postData);

var request = (HttpWebRequest)HttpWebRequest.Create(url);
request.CookieContainer = container;
request.UserAgent = "Mozilla/5.0";
request.Method = "POST";
request.KeepAlive = true;
request.AllowAutoRedirect = true;
request.CookieContainer = container;
request.ContentLength = buffer.Length;
request.ContentType = "application/x-www-form-urlencoded; charset=UTF-8";
request.Accept = "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8";

using (var requestStream = request.GetRequestStream())
    requestStream.Write(buffer, 0, buffer.Length);

using (var response = request.GetResponse())
{

        using (var reader = new StreamReader(response.GetResponseStream()))
        {
            var result = reader.ReadToEnd();
            //this is to read the page source after the request
            MessageBox.Show(result); 
        }             
}

这里还有来自网站的相关数据(我知道示例中的标记不同,我将它们设为相同但不起作用)

<form accept-charset="UTF-8" action="/signin" class="new_user" id="new_user" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="hHfoUnIbi+6RB51x1cqXqAYHkjz9mCi7nc86gMdiMOo=" /></div>

    <p class="notice">Signed out successfully.</p>

  <h2>login to your account</h2>

  <label for="user_login">Login</label>
  <input id="user_login" name="user[login]" size="30" type="text" />
  <label for="user_password">Password</label>
  <input id="user_password" name="user[password]" size="30" type="password" />

  <input id="user_offset" name="user[offset]" type="hidden" />


  <label for="user_remember_me">
    <input name="user[remember_me]" type="hidden" value="0" /><input id="user_remember_me" name="user[remember_me]" type="checkbox" value="1" /> 
    Remember me on this computer.
  </label>
  <button class="login" name="button" type="submit">Login</button>
    <a href="/users/password/new" class="forgotPassword">Forgot password?</a>
  </form>  </div>

最佳答案

试试这个方法:

        var cookieJar = new CookieContainer();
        CookieAwareWebClient client = new CookieAwareWebClient(cookieJar);

        // the website sets some cookie that is needed for login, and as well the 'authenticity_token' is always different
        string response = client.DownloadString("http://portal.movable.com/signin");

        // parse the 'authenticity_token' and cookie is auto handled by the cookieContainer
        string token = Regex.Match(response, "authenticity_token.+?value=\"(.+?)\"").Groups[1].Value;
        string postData =
            string.Format("utf8=%E2%9C%93&authenticity_token={0}&user%5Blogin%5D=USERNAME&user%5Bpassword%5D=PASSWORD&user%5Boffset%5D=5.5&user%5Bremember_me%5D=0&button=", token);


        //WebClient.UploadValues is equivalent of Http url-encode type post
        client.Method = "POST";
        response = client.UploadString("http://portal.movable.com/signin", postData);


        //i am getting invalid user/pass, but i am sure it will work fine with normal user/password

    }

使用的额外类:

public class CookieAwareWebClient : WebClient
{
    public string Method;
    public CookieContainer CookieContainer { get; set; }
    public Uri Uri { get; set; }

    public CookieAwareWebClient()
        : this(new CookieContainer())
    {
    }

    public CookieAwareWebClient(CookieContainer cookies)
    {
        this.CookieContainer = cookies;
    }

    protected override WebRequest GetWebRequest(Uri address)
    {
        WebRequest request = base.GetWebRequest(address);
        if (request is HttpWebRequest)
        {
            (request as HttpWebRequest).CookieContainer = this.CookieContainer;
            (request as HttpWebRequest).ServicePoint.Expect100Continue = false;
            (request as HttpWebRequest).UserAgent = "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0";
            (request as HttpWebRequest).Accept = "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8";
            (request as HttpWebRequest).Headers.Add(HttpRequestHeader.AcceptLanguage, "en-US,en;q=0.5");
            (request as HttpWebRequest).Referer = "http://portal.movable.com/signin";
            (request as HttpWebRequest).KeepAlive = true;
            (request as HttpWebRequest).AutomaticDecompression = DecompressionMethods.Deflate |
                                                                 DecompressionMethods.GZip;
            if (Method == "POST")
            {
                (request as HttpWebRequest).ContentType = "application/x-www-form-urlencoded";
            }

        }
        HttpWebRequest httpRequest = (HttpWebRequest)request;
        httpRequest.AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate;
        return httpRequest;
    }

    protected override WebResponse GetWebResponse(WebRequest request)
    {
        WebResponse response = base.GetWebResponse(request);
        String setCookieHeader = response.Headers[HttpResponseHeader.SetCookie];

        if (setCookieHeader != null)
        {
            //do something if needed to parse out the cookie.
            try
            {
                if (setCookieHeader != null)
                {
                    Cookie cookie = new Cookie(); //create cookie
                    this.CookieContainer.Add(cookie);
                }
            }
            catch (Exception)
            {

            }
        }
        return response;

    }
}

收到回复

<!DOCTYPE html>
<html>
<head>
  <title>MOVband Portal</title>
  <link href="/assets/application-f9d3794ad4639d96cd50c115ad241438.css" media="all" rel="stylesheet" type="text/css" />
  <!--[if lt IE 9]>
    <script src="/assets/modernizr-9b693978fbc3fcd01874b01875a736bf.js" type="text/javascript"></script>
    <script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script>
  <![endif]-->
  <!--[if IE 7]>
    <link href="/assets/ie7-ca67da697ba8da1de77889ceedc4db1a.css" media="all" rel="stylesheet" type="text/css" />
  <![endif]-->
  <script src="/assets/application-b1fcaae48e75e2455cf45e1d75983267.js" type="text/javascript"></script>
  <meta content="authenticity_token" name="csrf-param" />
<meta content="aC33zdBSSAz63dVjOgYXR/L6skV/QxxHe4XqX3UYCek=" name="csrf-token" />
</head>
<body id="login">
  <header>
    <div class="container">
      <a href="http://movable.com">
        <img alt="Movablelogo" class="logo" src="/assets/movableLogo-3429bb636ded1af0a80951c7d4386770.png" />
</a>    </div>
  </header>

  <section class="main">
    <div class="container">
      <div id="loginWindow" class="cf">
  <img alt="Movbandlogologin" class="movbandlogo" src="/assets/MOVbandLogologin-3cacbbe2b9bb05b16a3ca521acf81fc6.png" />
  <div class="cf">
    <div id="welcomeMessage">
      <h1>Welcome</h1>

      <img alt="Movbanddevice" class="device" src="/assets/MOVbandDevice-acbb62593330775ac09dced40e28e8e2.png" />
      <p>
        Just got your MOVband? We'll have you moving in no time with our quick product registration and setup.
        <a href="/join">Join &gt;</a>
      </p>
    </div>
    <form accept-charset="UTF-8" action="/signin" class="new_user" id="new_user" method="post"><div style="margin:0;padding:0;display:inline"><input name="utf8" type="hidden" value="&#x2713;" /><input name="authenticity_token" type="hidden" value="aC33zdBSSAz63dVjOgYXR/L6skV/QxxHe4XqX3UYCek=" /></div>

        <p class="alert">Invalid email or password.</p>

      <h2>login to your account</h2>

      <label for="user_login">Login</label>
      <input id="user_login" name="user[login]" size="30" type="text" value="USERNAME" />
      <label for="user_password">Password</label>
      <input id="user_password" name="user[password]" size="30" type="password" />

      <input id="user_offset" name="user[offset]" type="hidden" value="5.5" />


      <label for="user_remember_me">
        <input name="user[remember_me]" type="hidden" value="0" /><input id="user_remember_me" name="user[remember_me]" type="checkbox" value="1" /> 
        Remember me on this computer.
</label>
      <button class="login" name="button" type="submit">Login</button>
        <a href="/users/password/new" class="forgotPassword">Forgot password?</a>
</form>  </div>
</div>

    </div>
  </section>

  <footer>
    <div class="container">
      <div class="social_icons">
        <a href="https://www.facebook.com/getMOVband" class="fb_link" target="_blank"></a>
        <a href="https://twitter.com/getmovband" class="tw_link" target="_blank"></a>
        <a href="http://www.youtube.com/getmovband" class="yt_link" target="_blank"></a>
        <a href="http://www.linkedin.com/company/2355960" class="li_link" target="_blank"></a>
      </div>
    </div>
  </footer>
</body>
</html>

关于c# - 通过C#登录网站,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/14906619/

相关文章:

c# - 动态添加控件和事件处理程序 C#

asp.net-mvc - IIS7 中的自定义基本身份验证失败

android - 如何保护 Android 应用程序中的 key ?

symfony - 登录前添加监听器

php - LDAP 安全组 Symfony 2

c# - C#中使用字符串调用变量

c# - jquery数据表服务器端列

c# - 在 .Net 4.0 中,DirectorySearch 能否以允许我翻页的方式返回 LDAP 结果?

ios - 第三方SDK集成前需要考虑哪些安全参数

java - 安全漏洞 - Veracode 报告 - crlf 注入(inject)