11

I am trying to login from cURL command line with the command

curl --data "username=user&password=pass&submit=Login" http://www.ip.com:8080/LoginApplication/Login.jsp

And after that trying to access inner page using

curl http://www.ip.com:8080/LoginApplication/Success.jsp

But I am getting redirected to error page because of not logged in.

What I am missing in my first command so that it can maintain the session? I have my website locally hosted

13

Well, you'll need to store the session data in a cookie. You can use -c cookie_filename to create the cookie (add this to your login command). And then, for the other requests, you can read from the cookie with -b cookie_filename.

In example:

curl -s loginpage -c cookiefile -d "user=myself&pass=secure"
curl -s secretpage -b cookiefile

EDIT:

Notice many times loginpage is not the page you open with your web browser where you introduce your user and password. You'll have to check where the form is posting that data to (search the <form> tag in the source code and the action=... attribute). So, for example, if you want to log in to https://criticker.com, loginpage is https://www.criticker.com/authenticate.php and not https://www.criticker.com/signin.php, which is the one you open with your browser.

A tampering plugin/extension for your browser may help you find the correct loginpage and all the data that is being posted to it (like hidden input fields in the form).

  • Given sequence of -s -c -d doesnot even producing cookie file – SAR Jun 23 '14 at 9:49
  • It was a great help, I looked my source again and found my request is going to a controller and then I modified my command and it worked for me. – SAR Jun 23 '14 at 10:42
  • This works fine for HTTP, is there anything I need to do extra with HTTPS – SAR Jun 23 '14 at 12:20
  • @SAR: you are having problems with certificates. Maybe you just want to use -k. See curl --help for more information or search on the internet how to handle certificates. ;-) – Peque Jun 26 '14 at 11:27
  • 1
    Thank you the great help...Issue with my curl was, "Notice many times loginpage is not the page you open with your web browser where you introduce your user and password. "...Thank you! – Sambhav Pandey Oct 27 '17 at 6:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.