Skip to content

Form Filling with modified address_data.dat

Testing: URL = http://elearn.mgimo.ru/user/view.php?id=242809&course=1, MOODLE engine.

1. Input: Modified address_data.dat from 6 "columns" to 2 "colums".

Output: 

[-] 1/1 registration failed (class="error">) - http://elearn.mgimo.ru/login/signup.php?

Debug: "registration failed - class="error">" after "submission data for REGISTER_STEP3"

POST http://elearn.mgimo.ru/login/signup.php
country=TK  [type: RADIO/SELECT]
MAX_FILE_SIZE=15728640  [type: HIDDEN]
sesskey=zLG2V0cOmD  [type: HIDDEN]
_qf__login_signup_form=1  [type: HIDDEN]
username=csnn  [type: TEXT]
password=KF0pF7lSsє  [type: TEXT]
email=sherryl.chumleigh75@catchall.com  [type: TEXT]
email2=ssherryl.chumleigh75@catchall.com  [type: TEXT]
firstname=Феодосии  [type: TEXT]
lastname=Глушак  [type: TEXT]
city=  [type: TEXT]
submitbutton=Create my new account  [type: HIDDEN]

String in question is highlighted

2. Input: Original address_data.dat, 

Debug:

POST http://elearn.mgimo.ru/login/signup.php
country=GG  [type: RADIO/SELECT]
MAX_FILE_SIZE=15728640  [type: HIDDEN]
sesskey=tgWuiWPo6Z  [type: HIDDEN]
_qf__login_signup_form=1  [type: HIDDEN]
username=kyggcna  [type: TEXT]
password=OQ7+dfJm3  [type: TEXT]
email=tiffany-mccullers
@catchall.com  [type: TEXT]
email2=tiffany-mccullers
@catchall.com [type: TEXT]
firstname=Аваз  [type: TEXT]
lastname=Плешаков  [type: TEXT]
city=Newark  [type: TEXT]
submitbutton=Create my new account  [type: HIDDEN]

3. Input: Modified address_data.dat, 6 colums 1 row.

Debug:

POST http://elearn.mgimo.ru/login/signup.php
country=GH  [type: RADIO/SELECT]
MAX_FILE_SIZE=15728640  [type: HIDDEN]
sesskey=1dKSaIBHMf  [type: HIDDEN]
_qf__login_signup_form=1  [type: HIDDEN]
username=xbwevo  [type: TEXT]
password=FbDf!88dBD  [type: TEXT]
email=christi.shepherdson97@catchall.com  [type: TEXT]
email2=christi.shepherdson97@catchall.com  [type: TEXT]
firstname=Святополк  [type: TEXT]
lastname=Ландышев  [type: TEXT]
city=Something  [type: TEXT]
submitbutton=Create my new account  [type: HIDDEN]

To sum it up:

No form-filling if address_data.dat if in wrong format, i.e. 2 columns instead of 6.

Is it possible to operate with modified address_data.dat to something other than 6 columns?

 

Comments

  • cherubcherub SERnuke.com
    Seeing that Moodle uses %columnspinfile-address_data.dat-3% (the third column of address_data.dat) for city, you'd have to modify the engine to use a different column of your modified address_data.dat (either 1 or 2)
  • Thanks :)>- . Should've looked there... :((
Sign In or Register to comment.