Rest API Authentication with Autohotkey

See also questions close to this topic

• Free Rest Web Services for vulnerability detection (Dos & SQL/X-Path injections)

  I'm actually developping a vulnerability scanning tool that has to perform attacks on SOAP/REST Web Services to check if they are vulnerable to DoS and/or SQL/XML injection Attacks and I need some free Rest Web Services (with the right to send attack payloads) to test my product. Please, can anyone suggest me some web services ? I found some vulnerable SOAP web services but zero for rest and the problem is that I don't really have time to developp one because I have a strict and very close deadline and also because it's supposed to be a blackbox testing so it will maybe influence if I add vulnerabilies myself ... because I know how my tool works !
• How to authenticate clients in REST API application

  I know this topic has been treated more and more on this website, but after a lots of searching, i haven't managed to find the answer to my problems: i am currently developing a REST API that is no public opened (so only my applications can get in). For any request, you need a Brearer token, obtained from the endpoint /authenticate. The API is used to create, manage and delete users, premium users, teams and other things like that. I'm afraid that users can create a self-written script and do their own requests. So:

  1: How to verify that the requester is one of my applications and not a self-written user script? 2: Currently, the registration route doesn't need any authentication, but the problem is the same as above.

  A friend suggested me of create a user permissions mapping system like:

  Tables:
  - `users`
  - `permissions`
  - `permission_mapping`
  
  `users`:
  ID | UUID
  1  - a1584dc4-54ff-4900-b1f4-c3f929321506
  
  `permissions`:
  ID | Interface
  1  - "/api/users"
  
  `permission_mapping`:
  ID | UID | PID
  1  -  1  -  1
  

  so when a user do a request the application will check if it has the permission to access that route. But i don't think this will solve the problem.

  Hope someone can help me soon.
• Iterate Over CSV, Call API With Parameters

  Whew! New Python learner here. Finally got a realistic project to undertake/learn.

  Goal:

  • Using: The USGS Earthquake API and a Jupyter Notebook
  • Given: An Event Table of Event ID, Datetime (in various formats and some missing values), Latitude and Longitude (some missing values)
  • Add: Values from Event Table to API GET request
  • Return: A table of earthquakes within given radius, correlated by Event ID

  Steps Taken:

  1. Interrogate Event Table and drop blank rows (Ref: Python Data Science Handbook):

  import numpy as np
  import pandas as pd
  
  df=pandas.read_csv("tbLatLongDates.csv")
  df.dropna()
  print(df)
  

  • Results

  • Question 1: Why didn't df.dropna() remove the Nan values from rows with NaN records?

    2. Convert and Concatenate EVENT_DATE and EVENT_TIME into ISO8601 standard input for API calls

       • NO IDEA how to do this!

    3. Iterate over cleaned up and converted data set to produce API calls

       • NO IDEA how to iterate over CSV file.
       • Here is the valid API call for a single request.
       • Question 2: How does one iterate / insert values dynamically into this using python?

  import requests
  import json
  from datetime import datetime, timedelta
  
  url = "https://earthquake.usgs.gov/fdsnws/event/1/query?"
  payload = ""
  querystring = {
      "format": "geojson",
      "starttime": datetime.today() - timedelta(days=1),
      "endtime": datetime.today(),
      "latitude": 47,
      "longitude": -122,
      "maxradiuskm": 300,
      "orderby": "magnitude-asc"
  }
  
  r = requests.get(url, params=querystring)
  
  print(r)
  data = r.json()
  print(json.dumps(data, indent=2, sort_keys=True))
  

  This responds with nice json output. From here I feel like I could get things dialed in. My big unknown is how to iterate over the CSV and dynamically add values to the API call.

  Can anyone provide insights? Thank you!
• why FusedLocationProviderClient doesn't give location anymore?

  I am trying to get Location of mobile using FusedLocationProviderClient . Despite spending a whole day trying to accomplish the respective task, i am not able to get any location

  here's my code (java file):

  note: i've tried every possibility i could try, watched every video i could watch , spent a whole day trying again and again,now i had no choice left but to ask it here, i hope this would not get closed or be marked as duplicate .

  import android.Manifest;
  import android.content.pm.PackageManager;
  import android.location.Location;
  import android.os.Looper;
  import android.support.annotation.NonNull;
  import android.support.v4.app.ActivityCompat;
  import android.support.v7.app.AppCompatActivity;
  import android.os.Bundle;
  import android.view.View;
  import android.widget.Button;
  import android.widget.TextView;
  import android.widget.Toast;
  
  import com.google.android.gms.location.FusedLocationProviderClient;
  import com.google.android.gms.location.LocationCallback;
  import com.google.android.gms.location.LocationRequest;
  import com.google.android.gms.location.LocationResult;
  import com.google.android.gms.location.LocationServices;
  import com.google.android.gms.tasks.OnSuccessListener;
  
  public class MainActivity extends AppCompatActivity {
      private static final int REQUEST_CODE = 1000;
      private TextView textView;
      private Button startButton, stopButton;
  
      private FusedLocationProviderClient fusedLocationProviderClient;
      private LocationRequest locationRequest;
      private LocationCallback locationCallback;
  
      @Override
      public void onRequestPermissionsResult(int requestCode, @NonNull String[] permissions, @NonNull int[] grantResults) {
          super.onRequestPermissionsResult(requestCode, permissions, grantResults);
  
          switch (requestCode) {
              case REQUEST_CODE: {
                  if (grantResults.length > 0) {
                      if (grantResults[0] == PackageManager.PERMISSION_GRANTED) {
  
                      } else if (grantResults[0] == PackageManager.PERMISSION_DENIED) {
  
                      }
                  }
              }
          }
      }
  
      @Override
      protected void onCreate(Bundle savedInstanceState) {
          super.onCreate(savedInstanceState);
          setContentView(R.layout.activity_main);
  
          textView = findViewById(R.id.text_view);
          startButton = findViewById(R.id.button_start);
          stopButton = findViewById(R.id.button_stop);
  
  
  
          fusedLocationProviderClient = LocationServices.getFusedLocationProviderClient(this);
  
  
          if (ActivityCompat.shouldShowRequestPermissionRationale(this, Manifest.permission.ACCESS_FINE_LOCATION)) {
              ActivityCompat.requestPermissions(this, new String[]{Manifest.permission.ACCESS_FINE_LOCATION}, REQUEST_CODE);
          } else {
              buildLocationRequest();
              buildLocationCallBack();
          }
  
          fusedLocationProviderClient = LocationServices.getFusedLocationProviderClient(this);
  
          startButton.setOnClickListener(new View.OnClickListener() {
              @Override
              public void onClick(View view) {
  
  
                  if (ActivityCompat.checkSelfPermission(MainActivity.this, Manifest.permission.ACCESS_FINE_LOCATION) != PackageManager.PERMISSION_GRANTED
                          && ActivityCompat.checkSelfPermission(MainActivity.this, Manifest.permission.ACCESS_COARSE_LOCATION )!= PackageManager.PERMISSION_GRANTED) {
                      ActivityCompat.requestPermissions(MainActivity.this, new String[]{Manifest.permission.ACCESS_FINE_LOCATION}, REQUEST_CODE);
  
                      return;
                  }
                  fusedLocationProviderClient.requestLocationUpdates(locationRequest, locationCallback, Looper.myLooper());
                  startButton.setEnabled(!startButton.isEnabled());
                  stopButton.setEnabled(!stopButton.isEnabled());
  
              }
          });
  
          stopButton.setOnClickListener(new View.OnClickListener() {
              @Override
              public void onClick(View view) {
                  if (ActivityCompat.checkSelfPermission(MainActivity.this, Manifest.permission.ACCESS_FINE_LOCATION) != PackageManager.PERMISSION_GRANTED
                          && ActivityCompat.checkSelfPermission(MainActivity.this, Manifest.permission.ACCESS_COARSE_LOCATION )!= PackageManager.PERMISSION_GRANTED) {
                      ActivityCompat.requestPermissions(MainActivity.this, new String[]{Manifest.permission.ACCESS_FINE_LOCATION}, REQUEST_CODE);
  
                      return;
                  }
                  fusedLocationProviderClient.removeLocationUpdates(locationCallback);
                  startButton.setEnabled(!startButton.isEnabled());
                  stopButton.setEnabled(!stopButton.isEnabled());
  
              }
          });
  
  
  
  
  
  
  
  
      }
  
      private void buildLocationCallBack() {
          locationCallback = new LocationCallback()
          {
              @Override
              public void onLocationResult(LocationResult locationResult) {
                  for(Location location: locationResult.getLocations()){
                      textView.setText(String.valueOf(location.getLatitude())+"/"+String.valueOf(location.getLongitude()));
                  }
  
              }
          };
      }
  
      private void buildLocationRequest(){
          locationRequest = new LocationRequest();
          locationRequest.setPriority(LocationRequest.PRIORITY_HIGH_ACCURACY);
          locationRequest.setInterval(5000);
          locationRequest.setFastestInterval(3000);
          locationRequest.setSmallestDisplacement(10);
      }
  }
  
• How to fix error "Whitelabel Error Page" in Spring-boot

  I try to do API webservice by Spring-boot but I get an error "Whitelabel Error Page This application has no explicit mapping for /error, so you are seeing this as a fallback.

  Sun Apr 21 13:42:49 ICT 2019 There was an unexpected error (type=Not Found, status=404). No message available"

  ArrestGetByConApplication.java : 
  
  package com.arrestbycon.arrestGetByCon;
  import org.springframework.boot.SpringApplication; 
  import org.springframework.boot.autoconfigure.SpringBootApplication;
  import org.springframework.context.annotation.ComponentScan;
  
  @SpringBootApplication
  @ComponentScan
  public class ArrestGetByConApplication {
  
  public static void main(String[] args) {
      SpringApplication.run(ArrestGetByConApplication.class, args);
  }
  
  }
  
  and some of my controller :
  
  package com.arrestbycont.arrestGetByCon;
  
  import org.springframework.web.bind.annotation.RequestMapping;
  import org.springframework.web.bind.annotation.RequestMethod;
  import org.springframework.web.bind.annotation.RestController;
  import java.sql.*;
  import java.util.ArrayList;
  import com.arrestbycon.arrestGetByCon.Result;
  
  @RestController
  public class GetByCon {
  
      @RequestMapping(value = "/test", method = RequestMethod.GET)   
      public ArrayList<Result> getResult() {
        Integer arr_id;
        Integer off_id;
        String arr_code;
        String off_code;
        String off_name;
  
        ArrayList<Object> myArrlist = new ArrayList<Object>();
  
• Inconsistent ControlClick in Revit

  I'm having inconsistent beavhior with ControlClick in Revit. I'm trying to use AHK to make shortcuts for things in revit that normally can't be assigned. Or to press multiple shortcuts at once. When using ControlClick to do this, the button is not always pressed. Sometimes I need to press the button multiple times before it clicks.

  #NoEnv ;Recommended for performance and compatibility with future AutoHotKey releases
  #IfWinActive ahk_exe Revit.exe ;active in Revit
  #SingleInstance force ;skips a dialog box when reloading the script after editing
  
  F2:: ;Open selected section.
  MouseClick, right
  send, {g}
  
  F3:: ;Toggle Link, underlay, and pinned locks.
  send, {[ 2}
  send, {] 2}
  send, {\ 2}
  return
  
  F4:: ;clicks on family type pulldown, works when placing families or when changing type of family in place.
  click, -190, 70
  return
  
  F5:: ;Toggle leader on tag
  ControlClick, Leader, Autodesk Revit
  return
  
  F6:: ;Toggle Multiple when coping
  ControlClick, Multiple, Autodesk Revit
  return
  
  +F4:: ;Edit Type
  click, -68, 125
  return
  
  !F6:: ;Toggle Constrain when copying
  ControlClick, Constrain, Autodesk Revit
  return
  
  ;Family commands
  ;Family Type Commands
  
  F11:: ;Edit Parameter
  Controlclick, &Modify..., Family Types
  return
  
  F12:: ;New Parameter
  ControlClick, A&dd..., Family Types
  return
  
• How to use PHP to execute AutoHotKey script on Windows Server 2016?

  I have a Windows Server 2016 VPS with Plesk and PHP 7.1x.

  I am trying to execute a simple AutoHotKey script from PHP using the following command:

  <?php shell_exec('start /B "C:\Program Files\AutoHotkey\AutoHotkey.exe" C:\inetpub\vhosts\mydomain.com\App_Data\myahkscript.ahk'); ?>
  

  This is the only line on the page. I have tried different ahk scripts, the current one simply creates a MsgBox.

  When I execute my php page, on VPS Task Manager I see three processes created with the expected USR: cmd.exe, conhost.exe and php-cgi.exe. However, my PHP page just sits waiting on the server and nothing actually happens on the server.

  I have also tried the same line except replacing shell_exec with exec. This seems to make no difference. I have tried without start /b with both commands. In that case the PHP page completes but no new processes are started.

  I cannot find any errors in any logs: Mod_Security, Plesk Firewall, IIS.

  Any ideas?

  EDIT: I tried my command from the VPS command prompt and immediately slapped in the face with the obvious issue of the space in 'Program Files'. I quoted the string as shown above and the command works. This eliminated the hang when running from PHP. However, the command still does nothing when executed from the web page.

  EDIT: Based on suggestions from the referenced post 'debugging exec()':

  var_dump: string(0)""
  $output: Array()
  $return_val: 1
  

  One point was that I would probably not be able to invoke GUI applications. That puts a damper on the idea.
• Can I add a new language to the Beautify extension for Visual Studio Code?

  I have been trying for a few hours now to add AutoHotKey as a language to the Beautify extension for Visual Studio Code, and am just about to pull my hair out.

  Looking at the Overview on the download page I got the impression that I could add a new language, however, being sort of new to programming in general, the documentation I have been able to find has proven insufficient, and I could be mistaken entirely that custom languages is even a feature.

  I have added

  "beautify.language": {
      "ahk": {
          "type": "ahk",
          "filename": ".ahk"
      }
  

  to Visual Studio Code's settings.json.

  Furthermore, I have added a file .jsbeautifyrc to my file's directory

  {
      "ahk": {
          "indent_size": 4,
          "indent_char": " "
      }
  }
  

  I would like for my file (with the extension .ahk) to be formattable with the settings provided, however, when I try to run Beautify I get "Couldn't determine type to beautify, please choose." and a choice of JS, CSS, or HTML.

  I don't know where to go from here, any help would be great.