用cURL登录ROBLOX

Question

Remote Address:179.43.159.252:443
Request URL:https://www.roblox.com/home?nl=true
Request Method:GET
Status Code:200 OK
Request Headersview source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-GB,en-US;q=0.8,en;q=0.6
Cache-Control:max-age=0
Connection:keep-alive
Cookie: not putting cookie
Host:www.roblox.com
Origin:http://evil.com/
Referer:http://www.roblox.com/?logout=61253849
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
Query String Parametersview sourceview URL encoded
nl:true
Response Headersview source
Content-Length:164
Date:Sat, 20 Dec 2014 13:47:17 GMT
P3P:CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Refresh:0;URL=http://www.roblox.com/home?nl=true


Remote Address:179.43.159.252:443
Request URL:https://www.roblox.com/newlogin
Request Method:POST
Status Code:302 Found
Request Headersview source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:gzip, deflate
Accept-Language:en-GB,en-US;q=0.8,en;q=0.6
Cache-Control:max-age=0
Connection:keep-alive
Content-Length:34
Content-Type:application/x-www-form-urlencoded
Cookie: not putting cookie
Host:www.roblox.com
Origin:http://evil.com/
Referer:http://www.roblox.com/?logout=61253849
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
Form Dataview sourceview URL encoded
username:userhere
password:passhere
Response Headersview source
Cache-Control:private
Content-Length:130
Content-Type:text/html; charset=utf-8
Date:Sat, 20 Dec 2014 13:47:16 GMT
Location:/home?nl=true
P3P:CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Set-Cookie: not putting cookie
Set-Cookie:ChatWindows=; expires=Fri, 19-Dec-2014 13:47:17 GMT; path=/
Set-Cookie:IsMinimized=; expires=Fri, 19-Dec-2014 13:47:17 GMT; path=/

这就是我对GET/POST请求的回应。

我正试图发送一个跨域请求来登录我。

不，这不是恶意的用途。

请帮帮忙。

此外，我还准备使用以下代码：

<?php

$ch = curl_init('http://www.roblox.com/newlogin');
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
    username => 'USERHERE'
    password => 'PASSHERE'
);

$result = curl_exec($ch);
?>

还有一件事，远程地址不是我的。我现在连接到VPN了。

我真的需要帮助。

Answer 1

你很可能错过了反请求伪造令牌。

如何调试：

1. 使用Fiddler捕获站点登录
2. 使用Fiddler捕获您的登录
3. CTRL +W比较正在发布的内容
4. 固定，直到相同