2009-09-24 76 views
0

我嘗試模仿由封閉的源應用程序發送的網絡請求。下面 是從關閉源應用程序所捕獲的網絡請求快照:使用Jakarta HttpClient來模擬POST網絡請求

- Http: Request, POST /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage 
    Command: POST 
    - URI: /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage? 
    Location: /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage 
    ProtocolVersion: HTTP/1.1 
    - ContentType: application/x-www-form-urlencoded 
    MediaType: application/x-www-form-urlencoded 
    Cache-Control: no-cache 
    Pragma: no-cache 
    UserAgent: Mozilla/4.0 (Windows XP 5.1) Java/1.6.0_06 
    Host: www.xxx.com:20000 
    Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2 
    Connection: keep-alive 
    ContentLength: 164 
    HeaderEnd: CRLF 
    - payload: HttpContentType = application/x-www-form-urlencoded 
    [SORT]: 0,1,0,10,5,0,KL,0 
    [FIELD]: 33,38,51,58,68,88,78,98,99,101,56,57,69,70,71,72,89,90,91,92,59,60,61,62,79,80,81,82 
    [LIST]: 1155.KL,1295.KL,7191.KL,0097.KL,2267.KL 

我使用的HttpClient模仿上述請求。

/** 
* @param args the command line arguments 
*/ 
public static void main(String[] args) { 
    try { 
     // TODO code application logic here 
     HttpClient httpClient = new HttpClient(); 
     httpClient.getParams().setParameter(HttpMethodParams.USER_AGENT, "Mozilla/4.0 (Windows XP 5.1) Java/1.6.0_06"); 

     PostMethod post = new PostMethod("http://www.xxx.com:20000/%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage?"); 

     NameValuePair[] data = { 
      new NameValuePair("SORT", "0,1,0,10,5,0,KL,0"), 
      new NameValuePair("FIELD", "33,38,51,58,68,88,78,98,99,101,56,57,69,70,71,72,89,90,91,92,59,60,61,62,79,80,81,82"), 
      new NameValuePair("LIST", "1155.KL,1295.KL,7191.KL,0097.KL,2267.KL") 
     }; 
     post.setRequestBody(data); 
     httpClient.executeMethod(post); 
     System.out.println(post.getResponseBodyAsString());  
    } 
    catch (Exception exp) { 
     exp.printStackTrace(); 
    } 
} 

但是,服務器端沒有迴應。我試圖捕捉我自己的網絡請求快照:

- Http: Request, POST /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage 
    Command: POST 
    - URI: /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage 
    Location: /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage 
    ProtocolVersion: HTTP/1.1 
    UserAgent: Mozilla/4.0 (Windows XP 5.1) Java/1.6.0_06 
    Host: www.xxx.com:20000 
    ContentLength: 234 
    - ContentType: application/x-www-form-urlencoded 
    MediaType: application/x-www-form-urlencoded 
    HeaderEnd: CRLF 
    - payload: HttpContentType = application/x-www-form-urlencoded 
    SORT: 0%2C1%2C0%2C10%2C5%2C0%2CKL%2C0 
    FIELD: 33%2C38%2C51%2C58%2C68%2C88%2C78%2C98%2C99%2C101%2C56%2C57%2C69%2C70%2C71%2C72%2C89%2C90%2C91%2C92%2C59%2C60%2C61%2C62%2C79%2C80%2C81%2C82 
    LIST: 1155.KL%2C1295.KL%2C7191.KL%2C0097.KL%2C2267.KL 

看來,有兩個主要不同:

(1)URI

(2)有效載荷

請問有什麼錯過了我的httpclient代碼?

經過多次實驗,我意識到,httpclient在我的有效載荷上執行URL編碼。它明確地轉向

1155.KL,1295.KL,7191.KL,0097.KL,2267.KL

1155.KL%2C1295.KL%2C7191.KL%2C0097.KL %2C2267.KL

爲了避免這種情況,我編寫了一個測試代碼。以下測試代碼有效!

try { 
    Socket socket = new Socket("www.xxx.com", 20000); 
    PrintWriter out = new PrintWriter(socket.getOutputStream(), true); 
    final String body = "[SORT]=0,1,0,10,5,0,KL,0&[FIELD]=33,38,51,58,68,88,78,98,99,101,56,57,69,70,71,72,89,90,91,92,59,60,61,62,79,80,81,82&[LIST]=1155.KL,1295.KL,7191.KL,0097.KL,2267.KL"; 
    final int length = body.length(); 
    final String s = "POST /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage? HTTP/1.1\r\nContent-Type: application/x-www-form-urlencoded\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nUser-Agent: Mozilla/4.0 (Windows XP 5.1) Java/1.6.0_06\r\nHost: www.xxx.com:20000\r\nAccept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2\r\nConnection: keep-alive\r\nContent-Length: "+length+"\r\n\r\n" + body; 
    out.println(s); 

    BufferedReader in = new BufferedReader(new InputStreamReader(socket.getInputStream())); 
    while(true) { 
      String ss = in.readLine(); 
      if (ss == null) break; 
      System.out.println(ss); 
    } 

} 
catch (Exception exp) { 
} 

以下是拍攝快照:

Frame: Number = 16, Captured Frame Length = 597, MediaType = ETHERNET 
+ Ethernet: Etype = Internet IP (IPv4),DestinationAddress:[7C-04-20-00-01-00],SourceAddress:[01-00-01-00-00-00] 
+ Ipv4: Src = 10.176.181.55, Dest = 202.75.55.23, Next Protocol = TCP, Packet ID = 956, Total IP Length = 583 
+ Tcp: Flags=...AP..., SrcPort=49253, DstPort=20000, PayloadLen=543, Seq=3920474750 - 3920475293, Ack=3537289604, Win=4380 (scale factor 0x2) = 17520 
- Http: Request, POST /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage 
    Command: POST 
    + URI: /%5bvUpJYKw4QvGRMBmhATUxRwv4JrU9aDnwNEuangVyy6OuHxi2YiY=%5dImage? 
    ProtocolVersion: HTTP/1.1 
    + ContentType: application/x-www-form-urlencoded 
    Cache-Control: no-cache 
    Pragma: no-cache 
    UserAgent: Mozilla/4.0 (Windows XP 5.1) Java/1.6.0_06 
    Host: n2ntbfd03.asiaebroker.com:20000 
    Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2 
    Connection: keep-alive 
    ContentLength: 164 
    HeaderEnd: CRLF 
    - payload: HttpContentType = application/x-www-form-urlencoded 
    [SORT]: 0,1,0,10,5,0,KL,0 
    [FIELD]: 33,38,51,58,68,88,78,98,99,101,56,57,69,70,71,72,89,90,91,92,59,60,61,62,79,80,81,82 
    [LIST]: 1155.KL,1295.KL,7191.KL,0097.KL,2267.KL 
+0

可以捕捉到原始的請求?也許在你的快照中出現的列表是這樣發佈的:SORT = 0&SORT = 1&SORT = 0 ...但是你用來捕獲請求的軟件正在做一些漂亮的列表打印。 – Serxipc 2009-09-24 08:09:45

+0

現在真正的問題是,我如何避免HttpClient在我的負載上執行URL編碼? – 2009-09-24 13:02:52

+0

請嘗試http://www.fiddler2.com/或http://www.charlesproxy.com/來捕獲原始請求,以便我們看到如何發佈這些列表。 提琴手是免費的,但只適用於Windows。 Charles有30天的免費試用期。 – Serxipc 2009-09-24 13:56:55

回答

1

由參數名稱顯示在您的捕獲SORT VS [分頁]的方式來看。我懷疑服務器期待您發送帶有多個表單控件數組,像

SORT = 0 & SORT = 1個& SORT = 0 ...

他們可能做到這一點作爲一種安全措施,因爲這樣可以不會用HTML來完成。

編輯:您需要將您的參數,這樣,

NameValuePair[] data = { 
     new NameValuePair("SORT", "0"), 
     new NameValuePair("SORT", "1"), 
     ... 
     new NameValuePair("FIELD", "33"), 
     ... 
    }; 
+0

這是選擇多個值的發佈方式。 – Serxipc 2009-09-24 13:46:49

+0

看我的編輯.................... – 2009-09-24 14:05:33

+0

不,這不起作用。服務器期待看到原始的「[SORT] = 0,1,0,10,5,0,KL,0和[FIELD] = 33,...」。但HttpClient將始終執行URL編碼。我測試使用原始TCP套接字與數據withouth編碼,它工作得很好。但是,我需要使用HttpClient,因爲它支持NTLM。 – 2009-09-24 17:20:23

0

你是如何創建快照?參數名稱的括號是什麼意思?對於相同的參數,是否有多個值而不是逗號分隔的值,或者參數名稱是否應放在括號中?

1

您還缺少標題: 接受 的Cache-Control 附註

的單獨接受頭可能是足夠的服務器與一些有意義的迴應。嘗試這樣的事情對於HttpClient的4:

httpclient.addRequestInterceptor(new HttpRequestInterceptor() { 
     public void process(final HttpRequest request, final HttpContext context) throws HttpException, IOException { 
     request.setHeader("Pragma","no-cache"); 
     request.setHeader("Cache-Control","no-cache"); 
     request.setHeader("Accept","text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2"); 
     } 
    }); 

或者這樣東西的HttpClient 3.x的:

method.setRequestHeader("Pragma","no-cache"); 
method.setRequestHeader("Cache-Control","no-cache"); 
method.setRequestHeader("Accept","text/html, image/gif, image/jpeg, *; q=.2, */*; 
+0

對不起。我正在使用HttpClient 3.1 – 2009-09-24 07:33:39