BCR Export Protocol SHAPE 2012



Similar documents
Protocol-Level Evasion of Web Application Firewalls

reference: HTTP: The Definitive Guide by David Gourley and Brian Totty (O Reilly, 2002)

THE PROXY SERVER 1 1 PURPOSE 3 2 USAGE EXAMPLES 4 3 STARTING THE PROXY SERVER 5 4 READING THE LOG 6

HTTP Authentication. RFC 2617 obsoletes RFC 2069

Chapter 2: Interactive Web Applications

GET /FB/index.html HTTP/1.1 Host: lmi32.cnam.fr

No. Time Source Destination Protocol Info HTTP GET /ethereal-labs/http-ethereal-file1.html HTTP/1.

SOAP WSDL & HTTP MIME REST Web Services Companion Guide HIPAA Operating Rules (HOpR) CORE Phase II

Cyber Security Workshop Ethical Web Hacking

*[Bug hunting ] Jose Miguel Esparza 7th November 2007 Pamplona S21sec

Abusing the Internet of Things. BLACKOUTS. FREAKOUTS. AND

TCP/IP Networking An Example

Security-Assessment.com White Paper Leveraging XSRF with Apache Web Server Compatibility with older browser feature and Java Applet

Polyglot: Automatic Extraction of Protocol Message Format using Dynamic Binary Analysis

Chapter 27 Hypertext Transfer Protocol

HTTP. Internet Engineering. Fall Bahador Bakhshi CE & IT Department, Amirkabir University of Technology

Web applications. Web security: web basics. HTTP requests. URLs. GET request. Myrto Arapinis School of Informatics University of Edinburgh

Bld. du Roi Albert II, 27, B 1030 BRUSSELS Tel Fax Secure file upload in PHP web applications

Web Services April 21st, 2009 with Hunter Pitelka

Package httprequest. R topics documented: February 20, 2015

HTTP Protocol. Bartosz Walter

CS640: Introduction to Computer Networks. Applications FTP: The File Transfer Protocol

Outline Definition of Webserver HTTP Static is no fun Software SSL. Webserver. in a nutshell. Sebastian Hollizeck. June, the 4 th 2013

Introduction to ServerIron ADX Application Switching and Load Balancing. Module 6: Content Switching (CSW) Revision 0310

Internet Technologies Internet Protocols and Services

CONTRACT MODEL IPONZ DESIGN SERVICE VERSION 2. Author: Foster Moore Date: 20 September 2011 Document Version: 1.7

Project #2. CSE 123b Communications Software. HTTP Messages. HTTP Basics. HTTP Request. HTTP Request. Spring Four parts

Securing SharePoint Server with Windows Azure Multi- Factor Authentication

Real-Time Connectivity Specifications For. 270/271 and 276/277 Inquiry Transactions. United Concordia Dental (UCD)

VMware vcenter Log Insight Developer's Guide

Using SAML for Single Sign-On in the SOA Software Platform

requests_toolbelt Documentation

Web. Services. Web Technologies. Today. Web. Technologies. Internet WWW. Protocols TCP/IP HTTP. Apache. Next Time. Lecture # Apache.

Architecture of So-ware Systems HTTP Protocol. Mar8n Rehák

Protocolo HTTP. Web and HTTP. HTTP overview. HTTP overview

Demystifying cache. Kristian Lyngstøl Product Specialist Varnish Software AS

Hypertext for Hyper Techs

An Oracle White Paper June RESTful Web Services for the Oracle Database Cloud - Multitenant Edition

The Hyper-Text Transfer Protocol (HTTP)

Using Traffic Direction Systems to simplify fraud... and complicate investigations!

International Journal of Engineering & Technology IJET-IJENS Vol:14 No:06 44

Research of Web Real-Time Communication Based on Web Socket

Internet Technologies. World Wide Web (WWW) Proxy Server Network Address Translator (NAT)

T14 SECURITY TESTING: ARE YOU A DEER IN THE HEADLIGHTS? Ryan English SPI Dynamics Inc BIO PRESENTATION. Thursday, May 18, :30PM

Vodia PBX RESTful API (v2.0)

Guzzle Release December 19, 2015

HOST EUROPE CLOUD STORAGE REST API DEVELOPER REFERENCE

Playing with Web Application Firewalls

HTTP Caching & Cache-Busting for Content Publishers

Information Extraction Art of Testing Network Peripheral Devices

1 Recommended Readings. 2 Resources Required. 3 Compiling and Running on Linux

Deployment Guide. Caching (Static & Dynamic) Deployment Guide. A Step-by-Step Technical Guide

HTTP - METHODS. Same as GET, but transfers the status line and header section only.

World Wide Web. Before WWW

HTTP Response Splitting

Anatomy of a Pass-Back-Attack: Intercepting Authentication Credentials Stored in Multifunction Printers

Crowbar: New generation web application brute force attack tool

CloudOYE CDN USER MANUAL

Forms, CGI Objectives. HTML forms. Form example. Form example...

SOCIAL NETWORKING IN SMARTPHONE THROUGH A PROTOTYPE IMPLEMENTATION USING ANDROID

CPSC Network Programming. , FTP, and NAT.

NetCom SMS Bedrift API Technical Documentation

Alteon Browser-Smart Load Balancing

How To Set Up A Providex Web Server On Pc Or Mac Or Mac (For Pc Or Ipo) With A Web Server (For Mac) With An Ipo Or Ipot (For Ipo).Html (For Windows) With The

7 Why Use Perl for CGI?

Java Web Application Security

VAPIX, HTTP API Specification

HTTP/2: Operable and Performant. Mark

Electronic Mail

Sending MIME Messages in LISTSERV DISTRIBUTE Jobs

Arnaud Becart ip- label 11/9/11

The HTTP Plug-in. Table of contents

1. When will an IP process drop a datagram? 2. When will an IP process fragment a datagram? 3. When will a TCP process drop a segment?

Nuance Mobile Developer Program. HTTP Services for Nuance Mobile Developer Program Clients

What is Distributed Annotation System?

Web Application Forensics:

JASPERREPORTS SERVER WEB SERVICES GUIDE

PlayReady App Creation Tutorial

HTTP Authentifizierung

ivoyeur: permission to parse

CIS 551 / TCOM 401 Computer and Network Security. Spring 2007 Lecture 20

Application layer Web 2.0

NGN NNI Signalling Profile

Acrobat Connect. Using Connect Enterprise Web Services

Creating Form Rendering ASP.NET Applications

You can do THAT with SAS Software? Using the socket access method to unite SAS with the Internet

FTP and . Computer Networks. FTP: the file transfer protocol

Transcription:

BCR Export Protocol SHAPE 2012 Business Card Reader sends HTTP POST multipart request optional HTTP authentication is supported, BASIC and DIGEST methods with the following parameters: command - Action performed with business card. Possible values: add, edit, delete. personfirstname - string with contact first name personmiddlename - string with contact middle name personlastname - string with contact last name phoneticfirstname - string with contact phonetic first name phoneticlastname - string with contact phonetic last name prefix - string with contact name prefix suffix - string with contact name suffix nickname - string with contact nickname companyname - string with contact company name job - string with contact job title department - string with contact department title notes - string with contact notes birthday - string with birth date in unix time phones - array of arrays with phone strings [phones] => Array [mobile] => Array [0] => 0123654789 [0] => 0123546879 emails - array of arrays with email strings [emails] => Array [0] => sales@company.com urls - array of arrays with with url strings [urls] => Array

[0] => www.company.com otherinfo - array of strings. Contains whole recognized text in first element. Some other strings could be added later. [otherinfo] => Array [0] => SAMPLE COMPANY National Park 32415 phone 01 236 5478 mobile 0123 54687 email sales@company.conn website www.company.com JOHN SMITH addresses - array of address dictionaries with keys country, city, zip, street. [addresses] => Array [zip] => 32415 [country] => United States [street] => National Park ims - array of instant messenger dictionaries with keys service, user. [ims] => Array [service] => ICQ [user] => 123456789 sns - array of social network dictionaries with keys service, user. [sns] => Array [service] => facebook

[user] => JohnSmith dates - array of date dictionaries with keys label, date. Date is sent in unix time format. [dates] => Array [label] => Anniversary [date] => 1332321433 All parameters are UTF8-encoded. Image with photo of business card is sent as binary data in the last parameter with following header: [Content-Disposition: form-data; name="photo"; filename="photo.jpg ] [Content-Type: image/jpeg] Business Card Reader expects answer to this request with status code 200. Example HTTP request POST /test.php HTTP/1.1 Host: bcrtest.shapeservices.net User-Agent: BCR/2.2 CFNetwork/548.0.3 Darwin/10.7.0 Content-Length: 36565 Accept: */* Content-Type: multipart/form-data; boundary=---------------------------xao1xqci Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive Content-Disposition: form-data; name="personfirstname" JOHN Content-Disposition: form-data; name="personlastname" SMITH Content-Disposition: form-data; name="companyname" Sample Company Content-Disposition: form-data; name="otherinfo[0]" SAMPLE COMPANY National Park 32415

phone 01 236 5478 mobile 0123 54687 email sales@company.conn website www.company.com JOHN SMITH Content-Disposition: form-data; name="addresses[0][zip]" 32415 Content-Disposition: form-data; name="addresses[0][country]" United States Content-Disposition: form-data; name="addresses[0][street]" National Park Content-Disposition: form-data; name="phones[mobile][0]" 012365478 Content-Disposition: form-data; name="phones[work][0]" 012354687 Content-Disposition: form-data; name="emails[work][0]" sales@company.conn Content-Disposition: form-data; name="urls[work][0]" www.company.com Content-Disposition: form-data; name="job" Content-Disposition: form-data; name="command" edit Content-Disposition: form-data; name="photo"; filename="photo.jpg" Content-Type: image/jpeg [[***BINARY DATA***]] -- Results in PHP $_FILES: [photo] => Array [name] => photo.jpg

[type] => image/jpeg [tmp_name] => /tmp/phpo54rnj [error] => 0 [size] => 0 $_POST [personfirstname] => JOHN [personlastname] => SMITH [companyname] => Sample Company [otherinfo] => Array [0] => SAMPLE COMPANY National Park 32415 phone 01 236 5478 mobile 0123 54687 email sales@company.conn website www.company.com JOHN SMITH [addresses] => Array [zip] => 32415 [country] => United States [street] => National Park [phones] => Array [mobile] => Array [0] => 012365478 [0] => 012354687 [emails] => Array

[0] => sales@company.conn [urls] => Array [0] => www.company.com [job] => [command] => edit