|
录制一个系统登陆模块的脚本:
Action()
{
web_url("default.aspx",
"URL=http://59.41.255.178:886/Server/default.aspx",
"Resource=0",
"RecContentType=text/html",
"Referer=",
"Snapshot=t1.inf",
"Mode=HTML",
EXTRARES,
"Url=resources/images/background.jpg", "Referer=http://59.41.255.178:886/Server/Login.aspx?ReturnUrl=%2fServer%2fdefault.aspx", ENDITEM,
LAST);
web_submit_data("Login.aspx",
"Action=http://59.41.255.178:886/Server/Login.aspx?ReturnUrl=%2fServer%2fdefault.aspx",
"Method=POST",
"RecContentType=text/html",
"Referer=http://59.41.255.178:886/Server/Login.aspx?ReturnUrl=%2fServer%2fdefault.aspx",
"Snapshot=t2.inf",
"Mode=HTML",
ITEMDATA,
"Name=__LastVIEWSTATE_SessionKey", "Value=6f63c456-8610-4b11-957a-8e0117648b00", ENDITEM,
"Name=__VIEWSTATE", "Value=/wEPDwUJOTM3MjEyNzQzZGT1dIcBmqRpztb9bAPEfBG3os8Jhg==", ENDITEM,
"Name=txtAcount", "Value=*****", ENDITEM,
"Name=txtPassword", "Value=******", ENDITEM,
"Name=txtValidCode", "Value=", ENDITEM,
"Name=btnLogin", "Value=鐧诲綍", ENDITEM,
"Name=__EVENTVALIDATION", "Value=/wEWBgL3sq//CgK4hNP/DAK1qbSRCwKn34LlBAKC3IeGDAKiwImNC60/Yp8GDxkdv7lgnw+GIR6uDCpj", ENDITEM,
EXTRARES,
"Url=WebResource.axd?d=mZARIy6IU6X1QFYBDjkAPQ2&t=633758422133151386", "Referer=http://59.41.255.178:886/Server/CallCenter/Message.aspx", ENDITEM,
"Url=resources/images/bu_save_big.gif", "Referer=http://59.41.255.178:886/Server/CallCenter/Message.aspx", ENDITEM,
"Url=ScriptResource.axd?d=gDcqQZOIajeKLbSN1mmoJKbWgiMs7w3W0rBEVX2qCZhsEp4_3tE7P5cpYIFBcZsbiPljplTAoG8j7-9_Zvvry7JskUFi-lX8sA59mGVETUM1&t=633758424341265143", "Referer=http://59.41.255.178:886/Server/CallCenter/Message.aspx", ENDITEM,
"Url=Resources/images/menubg.gif", "Referer=http://59.41.255.178:886/Server/Navigation.aspx", ENDITEM,
"Url=Resources/images/menu/point_0.jpg", "Referer=http://59.41.255.178:886/Server/Navigation.aspx", ENDITEM,
"Url=Resources/images/menu/point_1.jpg", "Referer=http://59.41.255.178:886/Server/Navigation.aspx", ENDITEM,
"Url=ScriptResource.axd?d=gDcqQZOIajeKLbSN1mmoJKbWgiMs7w3W0rBEVX2qCZhsEp4_3tE7P5cpYIFBcZsbrl20-U_xO2eLBsm5vw6Knray5ZB7DhKNBA6IYqpaF60_jkVyX5ta6QxIkHgGGgac0&t=633758424341265143", "Referer=http://59.41.255.178:886/Server/CallCenter/Message.aspx", ENDITEM,
LAST);
web_submit_data("Message.aspx",
"Action=http://59.41.255.178:886/Server/CallCenter/Message.aspx",
"Method=POST",
"RecContentType=text/html",
"Referer=http://59.41.255.178:886/Server/CallCenter/Message.aspx",
"Snapshot=t3.inf",
"Mode=HTML",
ITEMDATA,
"Name=__EVENTTARGET", "Value=", ENDITEM,
"Name=__EVENTARGUMENT", "Value=", ENDITEM,
"Name=__LastVIEWSTATE_SessionKey", "Value=5899971e-2b02-48ad-ab0a-ec1b85dc8cc2", ENDITEM,
"Name=__VIEWSTATE", "Value=/wEPDwUJMjUzNTk5OTE4DxYIHg1DYW5EaXN0cmlidXRlZx4GZm9yQWxsZx4EVGljawKw6gEeB1RpbWVPdXQCAxYCZg9kFgICAQ9kFgICBQ8WAh4EaHJlZgUhL1NlcnZlci9yZXNvdXJjZXMvc3R5bGUvc3R5bGUuY3NzZGSdpHL9+VrSUEAeHI6nBEXD5isanQ==", ENDITEM,
"Name=__CALLBACKID", "Value=__Page", ENDITEM,
"Name=__CALLBACKPARAM", "Value=GetTimeOut", ENDITEM,
LAST);
return 0;
}
背景交代:
由于这是一个正在使用的系统,所以用户名和密码以*代替,不是错误
问题描述:
按照同样步骤两次录制后对比:LastVIEWSTATE_SessionKey是不相同的,但是VIEWSTATE却是相同的(两个web_submit_data里面都一样的情况)。LastVIEWSTATE_SessionKey应该是VIEWSTATE经过加密函数转化来的,本来就应该不相同,那么这个LastVIEWSTATE_SessionKey还需要关联吗?
还有两次录制的VIEWSTATE是相同的,我看查找出的大部分贴都是说明VIEWSTATE肯定是要关联的,那么VIEWSTATE应该是不相同的啊?
|
|