EricssonResearch / scream

SCReAM - Mobile optimised congestion control algorithm
BSD 2-Clause "Simplified" License
174 stars 53 forks source link

req_url (Embedded_Ace_Get_Task.cgi) -- 403 Forbidden #52

Closed boogity closed 1 year ago

boogity commented 1 year ago

Looking to use this webscraper to pull data from a Sierra Wireless RV55 for LTE network testing. I can login successfully with this script but attempting to use the req_url provided generates a 403 forbidden every time:

Output below is just print statements added to the original script in this repo.

login_url: http://192.168.13.31:9191/xml/Connect.xml
login response text: <rows status='0' message='OK' ></rows
request url: http://192.168.13.31:9191/cgi-bin/Embedded_Ace_Get_Task.cgi
request text: <html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1></body></html>

I know this was originally written for the RV50X but it looks like both models are using AirLinkOS and the URLs all seem to line up. With the network console up in Chrome DevTools I can verify the req_url you have specified in this repo is the same http://192.168.13.31:9191/cgi-bin/Embedded_Ace_Get_Task.cgi

Is there something more to making this work that's not included in the repo? It almost seems like maybe the CSRF token or the other cookie value included in the payload may be it but I thought I'd see if there's something special I need before I can make this work.

image

IngJohEricsson commented 1 year ago

Hi Unfortunately it is eons since I experimented with this so I cannot help on this, sorry.

/Ingemar

From: William @.> Sent: Tuesday, 30 May 2023 21:55 To: EricssonResearch/scream @.> Cc: Subscribed @.***> Subject: [EricssonResearch/scream] req_url (Embedded_Ace_Get_Task.cgi) -- 403 Forbidden (Issue #52)

Looking to use this webscraper to pull data from a Sierra Wireless RV55 for LTE network testing. I can login successfully with this script but attempting to use the req_url provided generates a 403 forbidden every time:

Output below is just print statements added to the original script in this repo.

login_url: http://192.168.13.31:9191/xml/Connect.xmlhttps://protect2.fireeye.com/v1/url?k=31323334-501cfaf3-313273af-454445554331-17b7826781014a9f&q=1&e=5c6c6abb-7511-4846-b817-4f76aa8b64db&u=http%3A%2F%2F192.168.13.31%3A9191%2Fxml%2FConnect.xml

login response text: </rows

request url: http://192.168.13.31:9191/cgi-bin/Embedded_Ace_Get_Task.cgihttps://protect2.fireeye.com/v1/url?k=31323334-501cfaf3-313273af-454445554331-e9e411eb8ee25456&q=1&e=5c6c6abb-7511-4846-b817-4f76aa8b64db&u=http%3A%2F%2F192.168.13.31%3A9191%2Fcgi-bin%2FEmbedded_Ace_Get_Task.cgi

request text: 403 Forbidden

Forbidden

I know this was originally written for the RV50X but it looks like both models are using AirLinkOS and the URLs all seem to line up. With the network console up in Chrome DevTools I can verify the req_url you have specified in this repo is the same http://192.168.13.31:9191/cgi-bin/Embedded_Ace_Get_Task.cgihttps://protect2.fireeye.com/v1/url?k=31323334-501cfaf3-313273af-454445554331-e9e411eb8ee25456&q=1&e=5c6c6abb-7511-4846-b817-4f76aa8b64db&u=http%3A%2F%2F192.168.13.31%3A9191%2Fcgi-bin%2FEmbedded_Ace_Get_Task.cgi

Is there something more to making this work that's not included in the repo? It almost seems like maybe the CSRF token or the other cookie value included in the payload may be it but I thought I'd see if there's something special I need before I can make this work.

[image]https://user-images.githubusercontent.com/12106342/242081868-1745ea68-f2de-4201-b992-75bb61768389.png

— Reply to this email directly, view it on GitHubhttps://protect2.fireeye.com/v1/url?k=31323334-501cfaf3-313273af-454445554331-9d914aecd7b23931&q=1&e=5c6c6abb-7511-4846-b817-4f76aa8b64db&u=https%3A%2F%2Fgithub.com%2FEricssonResearch%2Fscream%2Fissues%2F52, or unsubscribehttps://protect2.fireeye.com/v1/url?k=31323334-501cfaf3-313273af-454445554331-a1357a750cc264b3&q=1&e=5c6c6abb-7511-4846-b817-4f76aa8b64db&u=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FACRZ2GGAVTFIOQQFYEN5XP3XIZGBJANCNFSM6AAAAAAYUPOGUM. You are receiving this because you are subscribed to this thread.Message ID: @.**@.>>

boogity commented 1 year ago

No problem, thanks for your time regardless.