Ok this one is very simple. In reply to your POST login request, the server sends the following header:
- Set-Cookie: PHPSESSID=003097381080538829c6c43aab7c7651; path=/
All you need is to store the value of this cookie and send it with further HTTP requests. For example,
- sockwrite -n $sockname GET / HTTP/1.0
sockwrite -n $sockname Host: www.[/b]xxxx-xxxxxx.org
sockwrite -n $sockname Cookie: PHPSESSID=003097381080538829c6c43aab7c7651
sockwrite -n $sockname
If you do send the cookie, the server will send back the logged-in users page. And if you don't send it, you will get the default login page. Try it yourself
