Menu

Doubt to configure KeePass on a especific website

2017-04-05
2017-04-05
  • Wanderlei Hüttel

    Hello Guys

    I've been using KeePass for some time and I love it.
    I've tried to configure the bank web site but I saw that it looks have a function in the field to crypt password.
    The string "CHV4784850890" always change.

    <input style="display: inline-block;" type="password" name="senhaConta" id="senhaConta" size="15" maxlength="8" tabindex="4" onkeydown="return filtraPassa(this, event, 'CHV4784850890');" data-cip-id="senhaConta">

    So I guess I should simulate insertion of every character individually.
    Is there a way to to this?I cannot find.

    If anybody could help me I will appreciate

    Best Regards
    Wanderlei

     
  • Paul

    Paul - 2017-04-05

    I use Auto-Type to enter data most of the time. This works on my bank sites, but one requires very slow typing, so I use {DELAY=300} in the Auto-Type. Override the default Auto-Type when you edit the entry.

    cheers, Paul

     
  • Wanderlei Hüttel

    Hello Paul

    How I can configure this?
    In auto-type "Override default sequences"?
    Could you send an example?
    Example of my bank account:
    bank account=11111
    client account=22222
    password account=123456

    Best regards
    Wanderlei

     
  • fritzophrenic

    fritzophrenic - 2017-04-17

    How do you normally attempt to enter your password on this site using KeePass?

    You should only need the "override default sequences" options if your bank does not follow the usual pattern of having a text box for username and a text box for password right next to each other. Auto-type works by simulating the typing of a username, followed by a simulated "TAB" key, followed by the password, followed by the "ENTER" key. If that sequence works when typed manually, then the default autotype should work just fine.

    What Paul is suggesting is to add a delay between each simulated typed character. This is only needed if the bank website is actually looking for delays in the typing for some reason, or if it is badly designed enough that it will miss characters if it is busy processing earlier characters. In this case, yes, the "override default sequence" radio button should be selected, and you can just put the {DELAY=300} that Paul suggested at the beginning of the sequence.

     
  • Paul

    Paul - 2017-04-17

    Can you post a sample of the login page, or a link to the login page?

    cheers, Paul

     
    • Wanderlei Hüttel

      Hello Paul

      This is the address of my bank:
      https://www2.bancobrasil.com.br/aapf/login.jsp

      The problem is that I said before, the input password has a filter "onkeydown" that should crypt the password, and the sequence of characters of function "onkeydown" changes every refresh of page, for this is necessary input every char of password individually I suppose.

      Best regards
      Wanderlei

       
  • Paul

    Paul - 2017-04-19

    That site requires additional software that I don't have so I can't test it.

    If the site requires 3 items that can be entered using the keyboard - no mouse use - then you would need an Auto-Type sequence something like this.
    {DELAY=300}{ACCOUNT}{TAB}{CLIENT}{TAB}{PASSWORD}{ENTER}

    cheers, Paul

     
    • Wanderlei Hüttel

      Hello Paul

      I've made a copy of my bank login for you simulate:
      https://dpaste.de/uRFD

      I guess should be something like this:
      {ACCOUNT}{TAB}{CLIENT}{TAB}{DELAY=300}{PASSWORD-char1}
      {DELAY=300}{PASSWORD-char2}{DELAY=300}{PASSWORD-char3}{DELAY=300}{PASSWORD-char4}{DELAY=300}{PASSWORD-char5}{DELAY=300}{PASSWORD-char6}{DELAY=300}{PASSWORD-char7}{DELAY=300}{PASSWORD-char8}

      Best regards
      Wanderlei

       
  • Paul

    Paul - 2017-04-19

    I don't want to try to make that code work locally - it's easier to post a few screen shots.

    You only need one "DELAY=". It sets the inter-character delay to 300. If you want to wait for a while before the next step you can use {DELAY 1000}.

    If you need to send specific password characters you can use PICKCHARS. Note: you can't use PICKCHARS before the site asks for the characters because the characters are selected before KeePass types any characters.

    cheers, Paul

     
  • fritzophrenic

    fritzophrenic - 2017-04-20

    Are you sure you're using KeePass's built-in auto-type feature? I ask because when KeePass auto-type is running it is fairly obvious that each character is being entered individually, but it sounds like you think the entire password is entered all at once rather than one character at a time. This would be consistent with a browser plugin like KeeFox or chromeipass, not KeePass auto-type; several people recently have confused the two.

    So, did you specifically use CTRL+ALT+A to trigger the "auto type" feature? Or did you launch the KeePass window, find the entry, and press CTRL-V or use the context menu to perform autotype on the selected entry? These are the ways to use auto-type. If you just went to the webpage the password got entered automatically, or you pressed a button in your browser to enter the password, that is not auto-type.

    If you are actually using auto-type, then you only need one {delay=300}, at the beginning of your sequence. The entry of a single character at a time occurs automatically without any further configuration. That's how auto-type always works.

     

Log in to post a comment.

MongoDB Logo MongoDB