Skip to content

Instantly share code, notes, and snippets.

@tredence123
Created May 17, 2018 13:12
Show Gist options
  • Select an option

  • Save tredence123/540ab8e39a1ab21d560a3872667be315 to your computer and use it in GitHub Desktop.

Select an option

Save tredence123/540ab8e39a1ab21d560a3872667be315 to your computer and use it in GitHub Desktop.
web_add_auto_header("Upgrade-Insecure-Requests",
"1");
web_reg_save_param_regexp(
"ParamName=nonce",
"RegExp=nonce=(.*?)&client_id",
"Ordinal=1",
SEARCH_FILTERS,
"Scope=Headers",
"RequestUrl=*/login*",
LAST);
web_reg_save_param_regexp(
"ParamName=client_id",
"RegExp=client_id=(.*?)&redirect_uri",
"Ordinal=1",
SEARCH_FILTERS,
"Scope=Headers",
"RequestUrl=*/login*",
LAST);
web_reg_save_param_regexp(
"ParamName=state",
"RegExp=state=(\\w+)\\\r\\\n",
"Ordinal=1",
SEARCH_FILTERS,
"Scope=Headers",
"RequestUrl=*/login*",
LAST);
web_url("login",
"URL={URL}/login",
"Resource=0",
"RecContentType=text/html",
"Referer=",
"Snapshot=t48.inf",
"Mode=HTML",
LAST);
lr_start_transaction("Sign In");
web_revert_auto_header("Upgrade-Insecure-Requests");
web_add_auto_header("Origin",
"https://qa.sso.platform.qa.url.com);
web_revert_auto_header("Origin");
web_reg_find("Text=Draft / Inactive Classes",
LAST);
web_reg_save_param_regexp(
"ParamName=CorrelationParameter",
"RegExp=\\ content=\"(.*?)\"\\ ",
"Ordinal=3",
SEARCH_FILTERS,
"Scope=Body",
"IgnoreRedirections=Yes",
"RequestUrl=*/dashboard*",
LAST);
web_submit_data("j_spring_security_check",
"Action=https://url/platform-sso-server/j_spring_security_check",
"Method=POST",
"EncodeAtSign=YES",
"RecContentType=text/html",
"Referer=",
"Snapshot=t49.inf",
"Mode=HTML",
ITEMDATA,
"Name=uname", "Value={UserData}", ENDITEM,
"Name=j_username", "Value=homeoffice\\{UserData}", ENDITEM,
"Name=j_password", "Value={password}", ENDITEM,
"Name=domain", "Value=homeoffice", ENDITEM,
"Name=redirect", "Value=https://www.url.com, ENDITEM,
"Name=appName", "Value=GEMCDEV", ENDITEM,
"Name=crumb", "Value=", ENDITEM,
"Name=response_type", "Value=code", ENDITEM,
"Name=client_id", "Value={client_id}", ENDITEM,
"Name=scope", "Value=openid email", ENDITEM,
"Name=redirect_uri", "Value={URL}/login", ENDITEM,
"Name=nonce", "Value={nonce}", ENDITEM,
"Name=state", "Value={state}", ENDITEM,
"Name=prompt", "Value=null", ENDITEM,
LAST);
lr_end_transaction("Sign In",LR_AUTO);
lr_output_message("************** SESSION ID ************** : %s", lr_eval_string("{client_id}"));
lr_output_message("############## NONCE ID ############## : %s", lr_eval_string("{nonce}"));
web_find("Text Check", "What=Welcome ", LAST);
lr_think_time(5);
lr_start_transaction("Log Out");
web_submit_data("logout",
"Action={URL}/logout",
"Method=POST",
"RecContentType=text/html",
"Referer={URL}/getInstanceDetails?mode=schedule&scheduleClassMainKey={schedule_Class_Main_Key}",
"Snapshot=t1601.inf",
"Mode=HTTP",
ITEMDATA,
"Name=_csrf", "Value={CorrelationParameter}", ENDITEM,
"Name=_csrf", "Value={CorrelationParameter}", ENDITEM,
LAST);
web_add_header("Origin",
"https:qa.sso.platform.qa.com);
web_submit_data("globalLogout",
"Action=https://URL/platform-sso-server/globalLogout",
"Method=POST",
"RecContentType=text/html",
"Referer=https://URL/platform-sso-server/ppidp/logout?post_logout_redirect_uri={URL}/postLogout",
"Snapshot=t1602.inf",
"Mode=HTTP",
ITEMDATA,
"Name=post_logout_redirect_uri", "Value={URL}/postLogout", ENDITEM,
"Name=Yes", "Value=Yes", ENDITEM,
LAST);
web_url("postLogout",
"URL={URL}/postLogout",
"Resource=0",
"RecContentType=text/html",
"Referer=",
"Snapshot=t1603.inf",
"Mode=HTTP",
LAST);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment