Anyone know how to peak inside form submissions?

[mattkime]

I'm trying to take apart a web app and figure out how it operates, particularly the flow of form information. Yes, this should be simple. Unfortunately there is a lot of javascript in the way. A LOT. I'd like to see what form values are being sent in the end.

Any ideas?

[mikebw]

are you dealing with PHP here? I don't know much about it, but some forms will store their value inside the URL / address bar as you navigate around.

[mattkime]

thats a "GET" for as opposed to a "POST" form. unfortunately its a POST

[Tofer]

Suggestion 1: You probably already have tried this, but search for the

tags, and then step through it from there. If there aren't any tags, it is probably handled via javascript in a separate file, which you should be able to find. Do another search in that file for and go with it.

Suggestion 2: Download the application called Eavesdrop, which captures all the data going to/from your internet connection. Post a form and check the output, and you'll get everything you need.

http://www.versiontracker.com/dyn/moreinfo/macosx/24420

-Tofer

[TheTominator]

Edit a copy of the page and make the form action a script that you control. In the new receiving script, print out the submitted values. How you do that depends on the language. Using PHP as the receiving language, print out all the values of $_POST[] using something like this:
echo "

\n";
foreach ($_POST as $key => $value) {
echo "
• $key = $value
\n";
}
echo "

\n";

[Seacrest]

In addition to what Tom says, FireFox->WebDevXT->Forms can be helpful.

[mattkime]

The Tamper Data extension is what I needed. Its quite nice, even lets you set cookies.

[TheTominator]

[quote mattkime]even lets you set cookies.
Mmmmm.... Cookies.

If it also comes with Java, that would go well with cookies.

[comphernation]

Matt,

A fine general purpose sniffer is the free utility "tcpflow" (http://www.circlemud.org/~jelson/software/tcpflow/) which breaks the flow of packets into human-readable form. I've found it invaluable for deciphering numerous back-and-forth exchanges. An HTML version of the manpage can be found at http://www.circlemud.org/~jelson/softwar...low.1.html.

This tutorial http://www.owlriver.com/tips/tcpflow-tutorial/ might be helpful to get you started.