Heihachi Posted December 31, 2015 Report Posted December 31, 2015 haigood day everyone. I have finally hooked IE / Chrome. but here is what when I do something like this if(lpOptional !=NULL)****{ char cData[2005];********sprintf_s(cData,"%s",lpOptional);********write_log(POST_LOG,cData);*************}it saves that parameter to the log file, no problem but the problem I get is it returns something that looks encrypted and I don't get to see any data there containing headers, referers and other data here is an example of what I got in return-----------------------------------<RepLookup v="5"><G>4A72F430-B40C-4D36-A068-CE33ADA5ADF9</G><O>AB298D41-7E91-4C46-BE44-073E36B99971</O><D>10.0.8110.6</D><C>11.00.9600.18124</C><OS>6.3.9600.0.0</OS><I>9.11.9600.18125</I><L>en-GB</L><RU></RU><RI>46.228.47.115</RI><R><Rq><URL>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tLy9teWxleGlhTG9naW4=</URL><O>PRE</O><T>TOP</T><HIP>12.130.26.136</HIP></Rq><Rq><URL>aHR0cDovLzEyLjEzMC4yNi4xMzY=</URL><O>PRE</O><T>IP</T><HIP>12.130.26.136</HIP></Rq></R><WA/><PRT>1406</PRT></RepLookup>----------------------------------------------------------------------<RepLookup v="5"><G>4A72F430-B40C-4D36-A068-CE33ADA5ADF9</G><O>AB298D41-7E91-4C46-BE44-073E36B99971</O><D>10.0.8110.6</D><C>11.00.9600.18124</C><OS>6.3.9600.0.0</OS><I>9.11.9600.18125</I><L>en-GB</L><RU></RU><RI>46.228.47.115</RI><R><Rq><URL>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tLy9teWxleGlhTG9naW4=</URL><O>POST</O><T>TOP</T><HIP>12.130.26.136</HIP></Rq><Rq><URL>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tL215bGV4aWE=</URL><O>POST</O><T>ACTION</T><HIP>12.130.26.136</HIP></Rq></R><WA/><PRT>3741</PRT></RepLookup>----------------------------------------------------------------------product=lexia&username=jamesjimjam&password=jaja1234&submitLogin=----------------------------------------------------------------------<RepLookup v="5"><G>4A72F430-B40C-4D36-A068-CE33ADA5ADF9</G><O>AB298D41-7E91-4C46-BE44-073E36B99971</O><D>10.0.8110.6</D><C>11.00.9600.18124</C><OS>6.3.9600.0.0</OS><I>9.11.9600.18125</I><L>en-GB</L><RU>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tLy9teWxleGlhTG9naW4=</RU><RI>12.130.26.136</RI><R><Rq><URL>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tLy8vbXlsZXhpYUxvZ2luP2Vycm1zZz1UaGUrdXNlcm5hbWUrb3IrcGFzc3dvcmQreW91K3N1Ym1pdHRlZCtpcytub3QrdmFsaWQuK1BsZWFzZSt0cnkrYWdhaW4u</URL><O>PRE</O><T>TOP</T><HIP>12.130.26.136</HIP></Rq></R><WA/><PRT>2891</PRT></RepLookup>----------------------------------------------------------------------<RepLookup v="5"><G>4A72F430-B40C-4D36-A068-CE33ADA5ADF9</G><O>AB298D41-7E91-4C46-BE44-073E36B99971</O><D>10.0.8110.6</D><C>11.00.9600.18124</C><OS>6.3.9600.0.0</OS><I>9.11.9600.18125</I><L>en-GB</L><RU>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tLy9teWxleGlhTG9naW4=</RU><RI>12.130.26.136</RI><R><Rq><URL>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tLy8vbXlsZXhpYUxvZ2luP2Vycm1zZz1UaGUrdXNlcm5hbWUrb3IrcGFzc3dvcmQreW91K3N1Ym1pdHRlZCtpcytub3QrdmFsaWQuK1BsZWFzZSt0cnkrYWdhaW4u</URL><O>POST</O><T>TOP</T><HIP>12.130.26.136</HIP></Rq><Rq><URL>aHR0cHM6Ly9hdXRoLm15bGV4aWEuY29tL215bGV4aWE=</URL><O>POST</O><T>ACTION</T><HIP>12.130.26.136</HIP></Rq></R><WA/><PRT>2891</PRT></RepLookup>x-----------------------------------*even chrome did almost the same, except that it complains that the code buffer isn't enough.but it submits other logs to the file. this is giving me a hard time figuring. Quote