custom monitoring

A form-based login is usually just a POST method with a urlencoded payload:

 

 

==================

 

POST /index.php HTTP/1.1

 

Host: www.example.com

 

 

 

username=bob&password=mypassword

 

==================

 

 

Which equates to this single line string:

 

POST /index.php HTTP/1.1\r\nHost: www.example.com\r\n\r\n\r\nusername=bob&password=mypassword

 

 

The trick then is to figure out how your login page works and if there are subsequent messages after a successful login. If you capture the server side HTTP dialog you should see all of this. Then it's relatively simple to craft a cURL script in an external monitor, or if the login is simple, directly in the HTTP monitor in the GUI.