It will be long, so apologize in advance.
I play with writing a web session manager for my team using shellinabox. Currently, I work the way I want, with each new connection, it starts a new instance of shellinaboxd on a different port (if necessary). But one thing that PuTTY Connection Manager uses (which we are currently using) that I cannot receive is automatic login commands. After connecting, we automatically transfer our credentials, and then any other login commands that we can use (cd / tmp, etc.).
With fiddler, I see that every keystroke that I do sends a message to the root directory. Example:
http://localhost:1234/?width=190&height=52&session=J793zjWa6gtKXEeV%2FeyY7g&keys=0D
So I thought that if I grabbed this session token, which I could test with wget or curl to send message data to this session. Does not work...
My question will be, can someone give me any directions on what to try next? In the end, for my POC, I want to have a button on the page (I am pasting the link above on another page) that will allow me to press and send keystrokes for the string (I can process the string before the hexadecimal conversion) directly to the console view. I, apparently, are not in my depth, because I have no idea what to try next. I know that shellinabox uses vt100 for its console. I looked at JS for him, but could not find where in js it sends keystrokes. Also, as soon as I open the page with the built-in shellinabox, how can I pull the current session token that it uses?
Any help / pointers would be appreciated.