From ntwrkd at gmail.com  Wed Mar 10 18:48:34 2010
From: ntwrkd at gmail.com (ntwrkd)
Date: Wed, 10 Mar 2010 15:48:34 -0800
Subject: [Mechanize-users] Cookie Management
Message-ID: <f257b9ab1003101548x1e9f52a6m23339f155805560c@mail.gmail.com>

Does anyone have a resource for managing cookies with getting, setting
and modifying cookies with mechanize?

I'm trying to see if I can do things that the browser can't using
mechanize for pen-testing purposes.

Thanks,
Matt

From jeremywoertink at gmail.com  Wed Mar 10 23:32:42 2010
From: jeremywoertink at gmail.com (Jeremy Woertink)
Date: Wed, 10 Mar 2010 20:32:42 -0800
Subject: [Mechanize-users] Cookie Management
In-Reply-To: <f257b9ab1003101548x1e9f52a6m23339f155805560c@mail.gmail.com>
References: <f257b9ab1003101548x1e9f52a6m23339f155805560c@mail.gmail.com>
Message-ID: <1ea5c3821003102032x3b0253b7n3d8c18b73f5c4daa@mail.gmail.com>

I've never needed to use cookies with Mechanize, but there is a cookie jar
http://mechanize.rubyforge.org/mechanize/Mechanize/CookieJar.html
Have you tried this out?

~Jeremy

On Wed, Mar 10, 2010 at 3:48 PM, ntwrkd <ntwrkd at gmail.com> wrote:

> Does anyone have a resource for managing cookies with getting, setting
> and modifying cookies with mechanize?
>
> I'm trying to see if I can do things that the browser can't using
> mechanize for pen-testing purposes.
>
> Thanks,
> Matt
> _______________________________________________
> Mechanize-users mailing list
> Mechanize-users at rubyforge.org
> http://rubyforge.org/mailman/listinfo/mechanize-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://rubyforge.org/pipermail/mechanize-users/attachments/20100310/425d55f0/attachment-0001.html>

From ntwrkd at gmail.com  Thu Mar 11 00:02:53 2010
From: ntwrkd at gmail.com (ntwrkd)
Date: Wed, 10 Mar 2010 21:02:53 -0800
Subject: [Mechanize-users] Cookie Management
In-Reply-To: <1ea5c3821003102032x3b0253b7n3d8c18b73f5c4daa@mail.gmail.com>
References: <f257b9ab1003101548x1e9f52a6m23339f155805560c@mail.gmail.com>
	<1ea5c3821003102032x3b0253b7n3d8c18b73f5c4daa@mail.gmail.com>
Message-ID: <f257b9ab1003102102t1bb7f7bby1e2a646870b1492b@mail.gmail.com>

I did see that, but I was hoping there'd be something more descriptive
than the rubydoc as far as implementation.

On Wed, Mar 10, 2010 at 8:32 PM, Jeremy Woertink
<jeremywoertink at gmail.com> wrote:
> I've never needed to use cookies with Mechanize, but there is a cookie jar
> http://mechanize.rubyforge.org/mechanize/Mechanize/CookieJar.html
> Have you tried this out?
>
> ~Jeremy
>
> On Wed, Mar 10, 2010 at 3:48 PM, ntwrkd <ntwrkd at gmail.com> wrote:
>>
>> Does anyone have a resource for managing cookies with getting, setting
>> and modifying cookies with mechanize?
>>
>> I'm trying to see if I can do things that the browser can't using
>> mechanize for pen-testing purposes.
>>
>> Thanks,
>> Matt
>> _______________________________________________
>> Mechanize-users mailing list
>> Mechanize-users at rubyforge.org
>> http://rubyforge.org/mailman/listinfo/mechanize-users
>
>
> _______________________________________________
> Mechanize-users mailing list
> Mechanize-users at rubyforge.org
> http://rubyforge.org/mailman/listinfo/mechanize-users
>

From mike at csa.net  Thu Mar 11 11:34:18 2010
From: mike at csa.net (Mike Dalessio)
Date: Thu, 11 Mar 2010 11:34:18 -0500
Subject: [Mechanize-users] Cookie Management
In-Reply-To: <f257b9ab1003102102t1bb7f7bby1e2a646870b1492b@mail.gmail.com>
References: <f257b9ab1003101548x1e9f52a6m23339f155805560c@mail.gmail.com>
	<1ea5c3821003102032x3b0253b7n3d8c18b73f5c4daa@mail.gmail.com>
	<f257b9ab1003102102t1bb7f7bby1e2a646870b1492b@mail.gmail.com>
Message-ID: <618c07251003110834j1a5087f6n23e4b206f8cfee90@mail.gmail.com>

On Thu, Mar 11, 2010 at 12:02 AM, ntwrkd <ntwrkd at gmail.com> wrote:

> I did see that, but I was hoping there'd be something more descriptive
> than the rubydoc as far as implementation.
>

What specific questions do you have about the implementation?

http://github.com/tenderlove/mechanize/blob/master/lib/mechanize/cookie_jar.rb


>
> On Wed, Mar 10, 2010 at 8:32 PM, Jeremy Woertink
> <jeremywoertink at gmail.com> wrote:
> > I've never needed to use cookies with Mechanize, but there is a cookie
> jar
> > http://mechanize.rubyforge.org/mechanize/Mechanize/CookieJar.html
> > Have you tried this out?
> >
> > ~Jeremy
> >
> > On Wed, Mar 10, 2010 at 3:48 PM, ntwrkd <ntwrkd at gmail.com> wrote:
> >>
> >> Does anyone have a resource for managing cookies with getting, setting
> >> and modifying cookies with mechanize?
> >>
> >> I'm trying to see if I can do things that the browser can't using
> >> mechanize for pen-testing purposes.
> >>
> >> Thanks,
> >> Matt
> >> _______________________________________________
> >> Mechanize-users mailing list
> >> Mechanize-users at rubyforge.org
> >> http://rubyforge.org/mailman/listinfo/mechanize-users
> >
> >
> > _______________________________________________
> > Mechanize-users mailing list
> > Mechanize-users at rubyforge.org
> > http://rubyforge.org/mailman/listinfo/mechanize-users
> >
> _______________________________________________
> Mechanize-users mailing list
> Mechanize-users at rubyforge.org
> http://rubyforge.org/mailman/listinfo/mechanize-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://rubyforge.org/pipermail/mechanize-users/attachments/20100311/d2cf9de8/attachment.html>

From andrelimasilva at gmail.com  Wed Mar 17 08:17:40 2010
From: andrelimasilva at gmail.com (=?ISO-8859-1?Q?Andr=E9_Lima_Silva?=)
Date: Wed, 17 Mar 2010 09:17:40 -0300
Subject: [Mechanize-users] Get Frames
Message-ID: <6dfa2c371003170517u5005bf01v6b833b0c8d31c95a@mail.gmail.com>

Hello,

How to acess frames with Mechanize?

this is the page:

>> form.submit=> #<Mechanize::Page
 {url
  #<URI::HTTP:0x1011cc918 URL:
http://assistemas.no-ip.org:8088/helpdesk/corpocliente.html>}
 {meta}
 {title nil}
 {iframes}
 {frames
  #<Mechanize::Page::Frame "menuprincipalcliente"
"menuprincipalcliente.html">
  #<Mechanize::Page::Frame "homecliente" "homecliente.html">}
 {links}
 {forms}>

>>


-- 
Atenciosamente,

Andr? Lima
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://rubyforge.org/pipermail/mechanize-users/attachments/20100317/31e0247d/attachment.html>

From andrelimasilva at gmail.com  Wed Mar 17 08:40:14 2010
From: andrelimasilva at gmail.com (=?ISO-8859-1?Q?Andr=E9_Lima_Silva?=)
Date: Wed, 17 Mar 2010 09:40:14 -0300
Subject: [Mechanize-users] Get Frames
In-Reply-To: <6dfa2c371003170517u5005bf01v6b833b0c8d31c95a@mail.gmail.com>
References: <6dfa2c371003170517u5005bf01v6b833b0c8d31c95a@mail.gmail.com>
Message-ID: <6dfa2c371003170540m43f958e0l253cb63ff4c7bd57@mail.gmail.com>

sorry,

this is the page:

=> #<Mechanize::Page
 {url
  #<URI::HTTP:0x1017119f0 URL:
http://assistemas.no-ip.org:8088/helpdesk/atendimento.php>}
 {meta}
 {title nil}
 {iframes}
 {frames}
 {links}
 {forms}>

>>

2010/3/17 Andr? Lima Silva <andrelimasilva at gmail.com>

> Hello,
>
> How to acess frames with Mechanize?
>
> this is the page:
>
> >> form.submit=> #<Mechanize::Page
>  {url
>   #<URI::HTTP:0x1011cc918 URL:
> http://assistemas.no-ip.org:8088/helpdesk/corpocliente.html>}
>  {meta}
>  {title nil}
>  {iframes}
>  {frames
>   #<Mechanize::Page::Frame "menuprincipalcliente"
> "menuprincipalcliente.html">
>   #<Mechanize::Page::Frame "homecliente" "homecliente.html">}
>  {links}
>  {forms}>
>
> >>
>
>
> --
> Atenciosamente,
>
> Andr? Lima
>
>


-- 
Atenciosamente,

Andr? Lima
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://rubyforge.org/pipermail/mechanize-users/attachments/20100317/db4dc7f0/attachment.html>

From jeremywoertink at gmail.com  Wed Mar 17 14:20:32 2010
From: jeremywoertink at gmail.com (Jeremy Woertink)
Date: Wed, 17 Mar 2010 11:20:32 -0700
Subject: [Mechanize-users] Get Frames
In-Reply-To: <6dfa2c371003170540m43f958e0l253cb63ff4c7bd57@mail.gmail.com>
References: <6dfa2c371003170517u5005bf01v6b833b0c8d31c95a@mail.gmail.com>
	<6dfa2c371003170540m43f958e0l253cb63ff4c7bd57@mail.gmail.com>
Message-ID: <1ea5c3821003171120y7bf2a28eof257530bb9ef28ac@mail.gmail.com>

page = form.submit
page.frames

The second one you sent doesn't look like it has any frames to access
though.

~Jeremy

2010/3/17 Andr? Lima Silva <andrelimasilva at gmail.com>

> sorry,
>
> this is the page:
>
> => #<Mechanize::Page
>  {url
>   #<URI::HTTP:0x1017119f0 URL:
> http://assistemas.no-ip.org:8088/helpdesk/atendimento.php>}
>  {meta}
>  {title nil}
>  {iframes}
>  {frames}
>  {links}
>  {forms}>
>
> >>
>
> 2010/3/17 Andr? Lima Silva <andrelimasilva at gmail.com>
>
> Hello,
>>
>> How to acess frames with Mechanize?
>>
>> this is the page:
>>
>> >> form.submit=> #<Mechanize::Page
>>  {url
>>   #<URI::HTTP:0x1011cc918 URL:
>> http://assistemas.no-ip.org:8088/helpdesk/corpocliente.html>}
>>  {meta}
>>  {title nil}
>>  {iframes}
>>  {frames
>>   #<Mechanize::Page::Frame "menuprincipalcliente"
>> "menuprincipalcliente.html">
>>   #<Mechanize::Page::Frame "homecliente" "homecliente.html">}
>>  {links}
>>  {forms}>
>>
>> >>
>>
>>
>> --
>> Atenciosamente,
>>
>> Andr? Lima
>>
>>
>
>
> --
> Atenciosamente,
>
> Andr? Lima
>
>
> _______________________________________________
> Mechanize-users mailing list
> Mechanize-users at rubyforge.org
> http://rubyforge.org/mailman/listinfo/mechanize-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://rubyforge.org/pipermail/mechanize-users/attachments/20100317/7ebcda7c/attachment.html>

From rdpoor at gmail.com  Thu Mar 25 12:06:03 2010
From: rdpoor at gmail.com (Robert Poor)
Date: Thu, 25 Mar 2010 09:06:03 -0700
Subject: [Mechanize-users] tutorial for monitoring browser <=> server
	exchanges?
Message-ID: <5F515F7C-B8E1-42D6-A07B-D2082F91DA81@gmail.com>

I've dabbled in Mechanize and love it.  My application requires page  
scrubbing from different sites, each with its own method for logging  
in, redirecting, setting cookies, etc.

Are there any good tutorials (and perhaps tools) for watching the  
exchanges between a browser and a server as a user logs into a site  
and accesses a specific page?  Once I can see those exchanges, I'll  
know what Mechanize needs to do.

Thanks in advance...

- ff

From aaron.patterson at gmail.com  Thu Mar 25 12:43:32 2010
From: aaron.patterson at gmail.com (Aaron Patterson)
Date: Thu, 25 Mar 2010 09:43:32 -0700
Subject: [Mechanize-users] tutorial for monitoring browser <=> server
	exchanges?
In-Reply-To: <5F515F7C-B8E1-42D6-A07B-D2082F91DA81@gmail.com>
References: <5F515F7C-B8E1-42D6-A07B-D2082F91DA81@gmail.com>
Message-ID: <6959e1681003250943y660a038fxe6acb902d0f4b561@mail.gmail.com>

On Thu, Mar 25, 2010 at 9:06 AM, Robert Poor <rdpoor at gmail.com> wrote:
> I've dabbled in Mechanize and love it. ?My application requires page
> scrubbing from different sites, each with its own method for logging in,
> redirecting, setting cookies, etc.
>
> Are there any good tutorials (and perhaps tools) for watching the exchanges
> between a browser and a server as a user logs into a site and accesses a
> specific page? ?Once I can see those exchanges, I'll know what Mechanize
> needs to do.

Typically, I use LiveHTTPHeaders or Firebug to watch the request and
responses.  But if you have an end user doing this, they might not be
so technically inclined.  I've been messing with a way to record
sessions:

  http://gist.github.com/309164

Basically, it sets up a proxy, you tell your browser to use that
proxy, and the proxy records your interactions.  You might be able to
modify that code to get it to record your user's actions as a
mechanize script.

-- 
Aaron Patterson
http://tenderlovemaking.com/

From christopher.mcmahon at gmail.com  Thu Mar 25 12:38:18 2010
From: christopher.mcmahon at gmail.com (Chris McMahon)
Date: Thu, 25 Mar 2010 10:38:18 -0600
Subject: [Mechanize-users] tutorial for monitoring browser <=> server
	exchanges?
In-Reply-To: <5F515F7C-B8E1-42D6-A07B-D2082F91DA81@gmail.com>
References: <5F515F7C-B8E1-42D6-A07B-D2082F91DA81@gmail.com>
Message-ID: <72799cd71003250938t8a24e84k35e79927ae5ec231@mail.gmail.com>

Wireshark is my favorite.



On Thu, Mar 25, 2010 at 10:06 AM, Robert Poor <rdpoor at gmail.com> wrote:
> I've dabbled in Mechanize and love it. ?My application requires page
> scrubbing from different sites, each with its own method for logging in,
> redirecting, setting cookies, etc.
>
> Are there any good tutorials (and perhaps tools) for watching the exchanges
> between a browser and a server as a user logs into a site and accesses a
> specific page? ?Once I can see those exchanges, I'll know what Mechanize
> needs to do.
>
> Thanks in advance...
>
> - ff
> _______________________________________________
> Mechanize-users mailing list
> Mechanize-users at rubyforge.org
> http://rubyforge.org/mailman/listinfo/mechanize-users
>

From astarr at wiredquote.com  Thu Mar 25 13:34:23 2010
From: astarr at wiredquote.com (Aaron Starr)
Date: Thu, 25 Mar 2010 10:34:23 -0700
Subject: [Mechanize-users] tutorial for monitoring browser <=> server
	exchanges?
In-Reply-To: <5F515F7C-B8E1-42D6-A07B-D2082F91DA81@gmail.com>
References: <5F515F7C-B8E1-42D6-A07B-D2082F91DA81@gmail.com>
Message-ID: <669cc1ca1003251034h208b5ab1l3f196b1a15dd18be@mail.gmail.com>

I've used Charles (http://www.charlesproxy.com/) with good success. You can
write your sessions out to an xml file that captures everything about the
session.

Depending on your need, you may find it useful to write a script to
translate the xml into mechanize code. Or, you can just read it yourself.

Aaron


On Thu, Mar 25, 2010 at 9:06 AM, Robert Poor <rdpoor at gmail.com> wrote:

> I've dabbled in Mechanize and love it.  My application requires page
> scrubbing from different sites, each with its own method for logging in,
> redirecting, setting cookies, etc.
>
> Are there any good tutorials (and perhaps tools) for watching the exchanges
> between a browser and a server as a user logs into a site and accesses a
> specific page?  Once I can see those exchanges, I'll know what Mechanize
> needs to do.
>
> Thanks in advance...
>
> - ff
> _______________________________________________
> Mechanize-users mailing list
> Mechanize-users at rubyforge.org
> http://rubyforge.org/mailman/listinfo/mechanize-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://rubyforge.org/pipermail/mechanize-users/attachments/20100325/1abb956f/attachment.html>

From john at recaffeinated.com  Sun Mar 28 10:51:08 2010
From: john at recaffeinated.com (John M Lauck)
Date: Sun, 28 Mar 2010 10:51:08 -0400
Subject: [Mechanize-users] Submitting a form with an image input button
Message-ID: <cb883d091003280751y7d4e8b0cm2c42aa9d49afaab8@mail.gmail.com>

Does anyone have an example of submitting a form with an input, type=image
button?  I have a page with one form and can find the image button with
nokogiri, but mechanize doesn't pick it up.  It seems very straight forward
but it's as if mechanize finds no buttons at all.

John
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://rubyforge.org/pipermail/mechanize-users/attachments/20100328/928e8646/attachment.html>