Advertisement
Kvern

Untitled

Sep 19th, 2019
529
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.24 KB | None | 0 0
  1. External Connection (client POST Only) :
  2.  
  3. 1°) POST /global-protect/prelogin.esp?kerberos-support=yes&tmp=tmp&clientVer=4100&host-id=[removed]&clientos=Windows&os-version=Microsoft+Windows+10+Enterprise+2016+LTSB+%2c+64-bit&ipv6-support=yes
  4.  
  5. 2°) POST /global-protect/getconfig.esp HTTP/1.1 (application/x-www-form-urlencoded)
  6. HTML Form URL Encoded: application/x-www-form-urlencoded
  7. Form item: "user" = "[username]"
  8. Form item: "passwd" = ""
  9. Form item: "inputStr" = ""
  10. Form item: "ok" = "Login"
  11. Form item: "clientVer" = "4100"
  12. Form item: "portal-userauthcookie" = "empty"
  13. Form item: "portal-prelogonuserauthcookie" = "empty"
  14. Form item: "clientos" = "Windows"
  15. Form item: "clientgpversion" = "4.0.8-4"
  16. Form item: "computer" = "[computername]"
  17. Form item: "os-version" = "Microsoft Windows 10 Enterprise 2016 LTSB , 64-bit"
  18. Form item: "host-id" = "fc100246-1a04-4b7a-be02-e94d8285ac3d"
  19. Form item: "prelogin-cookie" = ""
  20. Form item: "ipv6-support"
  21.  
  22. 3°) POST /ssl-vpn/prelogin.esp?kerberos-support=yes&tmp=tmp&clientVer=4100&host-id=fc100246-1a04-4b7a-be02-e94d8285ac3d&clientos=Windows&os-version=Microsoft+Windows+10+Enterprise+2016+LTSB+%2c+64-bit&ipv6-support=yes
  23.  
  24. 4°) POST /ssl-vpn/login.esp HTTP/1.1 (application/x-www-form-urlencoded)
  25. HTML Form URL Encoded: application/x-www-form-urlencoded
  26. Form item: "prot" = "https:"
  27. Form item: "server" = "[external_gw_ip]"
  28. Form item: "inputStr" = ""
  29. Form item: "jnlpReady" = "jnlpReady"
  30. Form item: "user" = "[username]"
  31. Form item: "passwd" = ""
  32. Form item: "computer" = "[computername]"
  33. Form item: "ok" = "Login"
  34. Form item: "direct" = "yes"
  35. Form item: "clientVer" = "4100"
  36. Form item: "os-version" = "Microsoft Windows 10 Enterprise 2016 LTSB , 64-bit"
  37. Form item: "preferred-ip" = "[clientvpnip]"
  38. Form item: "preferred-ipv6" = ""
  39. Form item: "clientos" = "Windows"
  40. Form item: "clientgpversion" = "4.0.8-4"
  41. Form item: "portal-userauthcookie" = "empty"
  42. Form item: "portal-prelogonuserauthcookie" = "empty"
  43. Form item: "host-id" = "fc100246-1a04-4b7a-be02-e94d8285ac3d"
  44. Form item: "prelogin-cookie" = ""
  45. Form item: "ipv6-support" = "yes"
  46. Form item: "client-ip" = "[clientphysicalip]"
  47. Form item: "client-ipv6"
  48.  
  49. 5°) POST /ssl-vpn/getconfig.esp HTTP/1.1 (application/x-www-form-urlencoded)
  50. HTML Form URL Encoded: application/x-www-form-urlencoded
  51. Form item: "user" = "[username]"
  52. Form item: "addr1" = "[clientif1ip/mask]"
  53. Form item: "addr2" = "[clientif2ip/mask]"
  54. Form item: "addr-v6-1" = ""
  55. Form item: "addr-v6-2" = "2"
  56. Form item: "preferred-ip" = "[clientvpnip]"
  57. Form item: "preferred-ipv6" = ""
  58. Form item: "portal" = "[external_portal]"
  59. Form item: "authcookie" = "8d2dedfc4c56b4768f57c1baf20c56fa"
  60. Form item: "client-type" = "1"
  61. Form item: "os-version" = "Microsoft Windows 10 Enterprise 2016 LTSB , 64-bit"
  62. Form item: "app-version" = "4.0.8-4"
  63. Form item: "protocol-version" = "p1"
  64. Form item: "clientos" = "Windows"
  65. Form item: "ipv6-support" = "yes"
  66. Form item: "enc-algo" = "aes-256-gcm,aes-128-gcm,aes-128-cbc,"
  67. Form item: "hmac-algo"
  68.  
  69. 6°) POST /ssl-vpn/hipreportcheck.esp HTTP/1.1 (application/x-www-form-urlencoded)
  70. HTML Form URL Encoded: application/x-www-form-urlencoded
  71. Form item: "user" = "[username]"
  72. Form item: "domain" = "[domain]"
  73. Form item: "portal" = "[external_portal]"
  74. Form item: "authcookie" = "8d2dedfc4c56b4768f57c1baf20c56fa"
  75. Form item: "client-ip" = "[clientvpnip]"
  76. Form item: "client-ipv6" = ""
  77. Form item: "computer" = "[computername]"
  78. Form item: "md5" = "2c7322dfe7b70c9ec3bd7812c20312c"
  79. Form item: "client-role" = "global-protect-full"
  80.  
  81. Internal Connection (client POST + answers) :
  82.  
  83.  
  84. 1°) POST /global-protect/prelogin.esp?kerberos-support=yes&tmp=tmp&clientVer=4100&host-id=fc100246-1a04-4b7a-be02-e94d8285ac3d&clientos=Windows&os-version=Microsoft+Windows+10+Enterprise+2016+LTSB+%2c+64-bit&ipv6-support=yes
  85.  
  86. RESPONSE :
  87. <?xml version="1.0" encoding="UTF-8" ?>
  88. <prelogin-response>
  89. <status>Success</status>
  90. <ccusername>[username]</ccusername>
  91. <autosubmit>true</autosubmit>
  92. <msg></msg>
  93. <newmsg></newmsg>
  94. <authentication-message></authentication-message>
  95. <username-label></username-label>
  96. <password-label></password-label>
  97. <panos-version>1</panos-version><region>[worldregion]</region>
  98. </prelogin-response>
  99.  
  100.  
  101. 2°) POST /global-protect/getconfig.esp HTTP/1.1 (application/x-www-form-urlencoded)
  102. HTML Form URL Encoded: application/x-www-form-urlencoded
  103. Form item: "user" = "[username]"
  104. Form item: "passwd" = ""
  105. Form item: "inputStr" = ""
  106. Form item: "ok" = "Login"
  107. Form item: "clientVer" = "4100"
  108. Form item: "portal-userauthcookie" = "empty"
  109. Form item: "portal-prelogonuserauthcookie" = "empty"
  110. Form item: "clientos" = "Windows"
  111. Form item: "clientgpversion" = "4.0.8-4"
  112. Form item: "computer" = "[computername]"
  113. Form item: "os-version" = "Microsoft Windows 10 Enterprise 2016 LTSB , 64-bit"
  114. Form item: "host-id" = "fc100246-1a04-4b7a-be02-e94d8285ac3d"
  115. Form item: "prelogin-cookie" = ""
  116. Form item: "ipv6-support"
  117.  
  118. RESPONSE :
  119. here : https://pastebin.com/Q7cuD25D
  120.  
  121. 3°) POST /ssl-vpn/prelogin.esp?kerberos-support=yes&tmp=tmp&clientVer=4100&host-id=fc100246-1a04-4b7a-be02-e94d8285ac3d&clientos=Windows&os-version=Microsoft+Windows+10+Enterprise+2016+LTSB+%2c+64-bit&ipv6-support=yes HTTP/1.1
  122.  
  123. RESPONSE :
  124. <?xml version="1.0" encoding="UTF-8" ?>
  125. <prelogin-response>
  126. <status>Success</status>
  127. <ccusername>[username]</ccusername>
  128. <autosubmit>true</autosubmit>
  129. <msg></msg>
  130. <newmsg></newmsg>
  131. <license>no</license>
  132. <authentication-message></authentication-message>
  133. <username-label></username-label>
  134. <password-label></password-label>
  135. <panos-version>1</panos-version><region>192.168.0.0-192.168.255.255</region>
  136. </prelogin-response>
  137.  
  138.  
  139. 4°) POST /ssl-vpn/login.esp HTTP/1.1 (application/x-www-form-urlencoded)
  140. HTML Form URL Encoded: application/x-www-form-urlencoded
  141. Form item: "prot" = "https:"
  142. Form item: "server" = "[internal_gw_ip]"
  143. Form item: "inputStr" = ""
  144. Form item: "jnlpReady" = "jnlpReady"
  145. Form item: "user" = "[username]"
  146. Form item: "passwd" = ""
  147. Form item: "computer" = "[computername]"
  148. Form item: "ok" = "Login"
  149. Form item: "direct" = "yes"
  150. Form item: "clientVer" = "4100"
  151. Form item: "os-version" = "Microsoft Windows 10 Enterprise 2016 LTSB , 64-bit"
  152. Form item: "preferred-ip" = ""
  153. Form item: "preferred-ipv6" = ""
  154. Form item: "clientos" = "Windows"
  155. Form item: "clientgpversion" = "4.0.8-4"
  156. Form item: "portal-userauthcookie" = "empty"
  157. Form item: "portal-prelogonuserauthcookie" = "empty"
  158. Form item: "host-id" = "fc100246-1a04-4b7a-be02-e94d8285ac3d"
  159. Form item: "prelogin-cookie" = ""
  160. Form item: "ipv6-support" = "yes"
  161. Form item: "client-ip" = "[clientphysicalip]"
  162. Form item: "client-ipv6"
  163.  
  164. RESPONSE :
  165. <?xml version="1.0" encoding="utf-8"?>
  166. <jnlp><application-desc><argument>(null)</argument><argument>5ee861971031ff3c20ff7bdf330c8ce9</argument><argument>2b1c4284c0856b6b9a2e06a04402d02fd99430d8</argument><argument>[internal_gw_name]</argument><argument>[username]</argument><argument>(empty_authprofile)</argument><argument>vsys1</argument><argument>[domain]</argument><argument>(null)</argument><argument></argument><argument></argument><argument></argument><argument>notunnel</argument><argument>-1</argument><argument>4100</argument><argument></argument><argument>empty</argument><argument>empty</argument><argument></argument><argument>4</argument><argument>unknown</argument><argument></argument></application-desc></jnlp>
  167.  
  168.  
  169. 5°) POST /ssl-vpn/hipreportcheck.esp HTTP/1.1 (application/x-www-form-urlencoded)
  170. HTML Form URL Encoded: application/x-www-form-urlencoded
  171. Form item: "user" = "[username]"
  172. Form item: "domain" = "[domain]"
  173. Form item: "portal" = "[internal_GW_name]"
  174. Form item: "authcookie" = "5ee861971031ff3c20ff7bdf330c8ce9"
  175. Form item: "client-ip" = "[clientphysicalip]"
  176. Form item: "client-ipv6" = ""
  177. Form item: "computer" = "[computername]"
  178. Form item: "md5" = "f1aa2438db2c93ef81e5942cca2a"
  179. Form item: "client-role" = "global-protect-full"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement