[Sentry MBA] How parsing from POST Action Source?

[chaat21]

How I can parsing this key (token) from "POST Action Source" and use it at variables for "Form Redirect Header"?

Sory for my bad English

Example:

Site:

This is the hidden content, please

• Sign In
• or
• Sign Up

/login
Debug of BOT 1
Combo: <USER>:<PASS>
Direct Connection
----------------------------------------------------------------------------------

<-----Bot Status: Authenticating----->
<-----Sent Headers----->
POST /v1/auth/login HTTP/1.1
Accept: */*
Referer:

This is the hidden content, please

• Sign In
• or
• Sign Up

/login
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11
Host: example.com
Pragma: no-cache
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 143
Post Data:
username=<USER>&password=<PASS>&grant_type=password

<-----Received Headers----->
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Nov 2018 02:00:41 GMT
Content-Type: application/json
Connection: keep-alive

Set-Cookie: SESS_ID=abq03oass7oe5dbs1l1i1k3uc7; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
Transfer-Encoding: chunked

<-----Received Source----->
{"status":true,"expire_in":604800,"token":"5f9028ede4c639e5523aaf0245cf0f1c7c463670","token_type":"Bearer","refreshToken":"ffdf180c682abcfbe548ab1712c7dd38b3e5099e","redirectUrl":null}
 

GET /v1/profile/get HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0
Accept: application/json, text/javascript
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Authorization: Bearer 5f9028ede4c639e5523aaf0245cf0f1c7c463670
Content-Type: application/x-www-form-urlencoded
Referer:

This is the hidden content, please

• Sign In
• or
• Sign Up

Origin:

This is the hidden content, please

• Sign In
• or
• Sign Up

Connection: keep-alive
Accept-Encoding: gzip, deflate

 

Edited November 9, 2018 by chaat21