level 10
static void Main(string[] args)
{
string url = "http://127.0.0.1/wordpress/wp-login.php";
byte[] data = Encoding.UTF8.GetBytes("log=admin&pwd=admin");
HttpWebRequest request = WebRequest.Create(url) as HttpWebRequest;
request.AllowAutoRedirect = false;
request.Method = "POST";
request.ContentType = "application/x-www-form-urlencoded";
request.ContentLength = data.Length;
using (Stream stream = request.GetRequestStream())
{
stream.Write(data, 0, data.Length);
}
using (HttpWebResponse response = request.GetResponse() as HttpWebResponse)
{
Console.WriteLine(response.Headers.ToString());
}
request.Abort();
}
关键:request.AllowAutoRedirect = false; 如果允许自动重定向的话,发送请求到重定向到页面时并没有带上登录后的cookie,导致无法登录,看似无法获取httponly的cookie,实则不是。
2014年06月11日 15点06分