[Solved] Help in hacking a trap

ron92663 · 2015-07-19T17:33:38.000Z

I am working on an online site (not a game) where I log on with multiple accounts. I wrote a script to extract the log-in name and password from an XLS file My script would mouse over the "sign in" graphic and click on it thus opening the popup window for pasting in the user name and password and it works great. They now have changed it so that if my script-mouse clicks on the sign-in graphic then it locks me out. If I pause my script, click the sign-in graphic by hand, then continue the script, it works fine. So obviously they have a way of telling if the sign in click was generated from a a script or from a real manual mouse click. Any suggestions on how to fool them? thanks

Originally Posted by Athos

Send functions (keystrokes or clicks) and mouse movements are 'emulated' orders from the script to your O.S., and then to a thread... so it's like you are really using the keyboard/mouse; I know scripts can be blocked (so the thread doesn't receive the orders), but I never heard a thread stops a certain part of the orders.
Are you sure it's not any other problem? Remember, they changed their web site..

I did tried the script on another computer with the same results.
Apparently they know some users have multiple accounts and that some users use those accounts to automatically to logon, do stuff they do not want to happen, and then log off... all via a script. Apparently they attacked the problem simply by disallowing a script generated "sign in" mouse click.

The thing is though that all this is done with Firefox and/or Chrome on the local computers so I was hoping there was an addon that could correct this at the browser level. Seems like I should be able to call some kind of a routine that changes what the host server "sees" (real mouse click vs OS click). Maybe I need to hire a Firefox scripter, eh?

Originally Posted by ron92663

I did tried the script on another computer with the same results.
Apparently they know some users have multiple accounts and that some users use those accounts to automatically to logon, do stuff they do not want to happen, and then log off... all via a script. Apparently they attacked the problem simply by disallowing a script generated "sign in" mouse click.

The thing is though that all this is done with Firefox and/or Chrome on the local computers so I was hoping there was an addon that could correct this at the browser level. Seems like I should be able to call some kind of a routine that changes what the host server "sees" (real mouse click vs OS click). Maybe I need to hire a Firefox scripter, eh?

Are you using X Y for the mouse clicks? Or is it tab button or something like that?

Originally Posted by Athos

Are you using X Y for the mouse clicks? Or is it tab button or something like that?

Sikuli is a graphic recognition script that automates everything in a GUI screen.
sikuli.org/
So I assume Sikuli finds the specific src graphic (in this case the "sign-in" graphic on the web page), finds the coordinates on the screen, then sends the mouse there and emulates a click in that area.
Since the browser (FF) is a wall between my computer and their server I was hoping that some kind of a Firefox script could be written that sends their server the signal of a manual click instead of an OS emulation of a mouse click.
If this sounds confusing, blame me. I am the ignorant one and explaining ones ignorance is virtually impossible... I think.

Originally Posted by ron92663

Sikuli is a graphic recognition script that automates everything in a GUI screen.
sikuli.org/
So I assume Sikuli finds the specific src graphic (in this case the "sign-in" graphic on the web page), finds the coordinates on the screen, then sends the mouse there and emulates a click in that area.
Since the browser (FF) is a wall between my computer and their server I was hoping that some kind of a Firefox script could be written that sends their server the signal of a manual click instead of an OS emulation of a mouse click.
If this sounds confusing, blame me. I am the ignorant one and explaining ones ignorance is virtually impossible... I think.

I've a really short knowledge about scripting, but anyway I can asure you the problem is that 'skuli'. For some reason, the first or one of the first function(s) is not being made, so the other functions can't go ahead... what can you do now? Try to fix the code, request the owner to check it or replace it with a new one.
I know it sound basic, but why not try X Y coordinates and some send functions?

SolvedHelp in hacking a trap

Similar Threads

Tags for this Thread