Scripting a logon

Hello -

This may not be the right forum for this particular issue, but I'll give it a shot -

I have an EFG80 from linksys. It's an NAS [linksys.com] box for a home network. Every night I shut this thing down along with three other 2000 systems. I would like to be able to remotely kill all 4 devices with one click.

The windows boxes are easy [sysinternals.com]


psshutdown -u admin -p passwd -k -f -t 15 -m "System is going down" \\sys2
psshutdown -u admin -p passwd -k -f -t 15 -m "System is going down" \\sys1
psshutdown -k -f -t 15 "System is going down"

(psshutdown [sysinternals.com])

The EFG80 can only be shut down from within the web based administration pages installed within the unit. Anyone with a linksys or probably any number of other manufacturers router WAP etc. know what I'm talking about.

I can get to the page with the button directly:

http://192.168.1.xx/Management/setup.cgi?next_file=status.htm
http://192.168.1.xx/Management/setup.cgi?next_file=status.htm

The button is javascript based, <a href="javascript:action(1);">"button image"</a>

Here is the action() function:

<script language="JavaScript" type="text/javascript">
<!-- Start Script// other functions
function action(no)
{
var cf = document.status;
if (no == 1)
cf.todo.value = "shutdown_now";
if (no == 2)
cf.todo.value = "restart_now";
cf.submit();
}
// other functions</script>
</head>

The problem is that I must authenticate via a '.htpasswd' before running the cgi script which serves the page with my configuration.

http://192.168.1.xx/Management/setup.cgi?next_file=status.htm

I can see the '.htpasswd' file by:

http://192.168.1.xx/Management/

Which gives a listing of all the files which make up the admin web pages, I don't think they want their users poking around that folder, but there is nothing there any way.

The box runs an embedded linux dist and thttpd/2.20c. Linksys claims a shell is not available.

Can I script the submiting of my admin credentials along with the execution of the shutdown function?

What is a document.status object, and what does the submit(); function do?

Would it be possible to create a perl, or other lang. script which would supply the admin user and pass, and execute the java function ultimately shutting down the system?

Thanks in advance

~Dave

[edited by: engine at 5:25 pm (utc) on April 6, 2004]

[TELNET] CONNECT (NAS-DEVICE/192.168.1.**) GET /Management/<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD> <BODY BGCOLOR="#cc9999"><H2>401 Unauthorized</H2> Authorization required for the URL '/Management/'. <HR> <ADDRESS><A HREF="http://www.example.com/software/thttpd/">thttpd/2.20c 21nov01</A></ADDRESS> </BODY></HTML>

[TELNET] INFO: DISCONNECTED

[TELNET] CONNECT (NAS-DEVICE/192.168.1.XX)GET /Management/setup.cgi?next_file=status.htm HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Accept-Language: en-us Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705) Host: 192.168.1.XX Connection: Keep-Alive

HTTP/1.1 401 Unauthorized Server: thttpd/2.20c 21nov01 Content-type: text/html Date: Wed, 01 Oct 2003 00:34:05 GMT Last-modified: Wed, 01 Oct 2003 00:34:05 GMT Accept-Ranges: bytes Connection: close WWW-Authenticate: Basic realm="Administration"<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD> <BODY BGCOLOR="#cc9999"><H2>401 Unauthorized</H2> Authorization required for the URL '/Management/setup.cgi?next_file=status.htm'.  <HR> <ADDRESS><A HREF="http://www.example.com/software/thttpd/">thttpd/2.20c 21nov01</A></ADDRESS> </BODY></HTML>

[TELNET] INFO: DISCONNECTED

[TELNET] CONNECT (NAS-DEVICE/192.168.1.XX)

GET /Management/setup.cgi?next_file=status.htm HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Accept-Language: en-us Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705) Host: 192.168.1.XX Connection: Keep-Alive Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

[TELNET] CONNECT (NAS-DEVICE/192.168.1.XX)POST /Management/setup.cgi HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Referer: http://192.168.1.XX/Management/setup.cgi Accept-Language: en-us Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705) Host: 192.168.1.88 Content-Length: 222 Connection: Keep-Alive Cache-Control: no-cache Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

email_enable=&email_1=example@example.com&email_2=&email_subject= GigaDrive+report&h_email_enable=checked&message=&this_file=status.htm&todo=shutdown_now&h_email_1= example@example.com&h_email_2=&h_email_subject=GigaDrive+report

Scripting a logon

getting past an htpasswd file

GarroteYou

bcolflesh

GarroteYou

wkitty42

GarroteYou

wkitty42

GarroteYou

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week