Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #13943

Re: http heartbeat software...

Show all headers | View raw

Robert Heller wrote on 05. March 2015:
>
> I am looking for a piece of software that will 'fake' regular web browsing.
> The local mall (Hampshire Mall here in Hadley, MA)'s 'Free WiFi' has this
> totally obnoxious feature. First of all they intercept the first HTTP/HTTPS
> request and redirect you to their disclamer website nonsense.

Don't do all "mall WIFI" services" so? ;-)

Well mine does too.

> Then if you don't keep surffing the web (eg you do something like use
> some oddball protocol like SSH to do stuff), they stop routing your
> packets and require you to connect to their disclamer website
> nonsense. I am one of those people who *DON'T* use webmail and do do
> things like use slogin to connect to Linux servers and I use a
> QWK-based E-Mail/news reader system (using that odd SSH protocol that
> no one in mess-windows-land has every head of). It is a pain in the
> butt to keep having to go off and visit a random website every so
> often, so I am looking for some program that issues a HTTP GET request
> every so often. I guess I could write a script using sleep and wget,
> but I was wondering if there is some simple stupid program out there
> that does that. I tried a web search for 'http heartbeat program', but
> mostly got medical related hits :-(.

That problem I don't have. Can do SSH, IRC, even Telnet. But am not
allowed to visit pr0n sites otherwise. ;-)

Anyway, I downloaded the "disclaimer web page". In that page you
basically submit the provided user name and password (both are "free",
which is there to see is plain text btw. in my mall) by checking a box
and clicking a form button. Until a few years ago that was all to do, so
I scripted it. The idea to use wget for that was already mentioned by
Rich.

Today it gets your MAC and somehow sends this to their router along with
a Session-ID. Hadn't the patience to deal with how to script that yet.

So first thing I would do is just downloading their disclaimer page and
have a look into the HTML. If it's static it shouldn't be too hard to
script something with wget.

If you can (and you usually can :-) change the proxy settings of your
browser in the running session you could create a local proxy server and
capture what their server sends back to you after you sent the form.If
it's not HTTPS. You need something like netcat for that and then do

netcat -lp10000 > malldisclamer.html

Then let the mall disclaimer page load. When it's loaded, go to your
browser's proxy settings and set it to 127.0.0.1 and port 10000 and then
send the form to their router. Your browser might "freeze" or just throw
an error. Abort the netcat command with CRTL-c and in malldisclamer.html
you should have the traffic to analyze.

If what you find there is static (do this on several days to verify) you
can even send this traffic back occasionally with

netcat http://mallsite... 80 < malldisclamer.html

What to set for "mallsite..." you see in the file after "POST". But
usually without the "HTTP/1.1" at the end. Port is usually 80 but might
differ from hotspot to hotspot. You'll also see that in your capture.
-- 
Andreas

I wish my grass was emo. Then it would cut itself.

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

http heartbeat software... Robert Heller <heller@deepsoft.com> - 2015-03-05 11:21 -0600
  Re: http heartbeat software... Rich <rich@example.invalid> - 2015-03-05 21:47 +0000
    Re: http heartbeat software... Robert Heller <heller@deepsoft.com> - 2015-03-05 20:46 -0600
  Re: http heartbeat software... Andreas Kohlbach <mar15.6.ankman@spamgourmet.net> - 2015-03-05 17:41 -0500
  Re: http heartbeat software... William Unruh <unruh@invalid.ca> - 2015-03-05 23:52 +0000
  Re: http heartbeat software... Tim Watts <tw_usenet@dionic.net> - 2015-03-06 08:14 +0000
  Re: http heartbeat software... "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-03-06 14:26 +0100
  Re: http heartbeat software... aitch <null@void.invalid> - 2015-03-07 19:35 +0000

csiph-web