[sebasur4]

Hi, I want to send a POST request to an online sales website so I can send the same info I would send in the forms, but manually.
My goal is to select a delivery method that doesn't appear anymore in the UI, but I'm pretty sure exists in the database. The only available option for now is to checkout at the store, but I want to have the item delivered to my home. I've played a little bit with the website and found some JSON fields like:
delivery_option[276]=10,
delivery_message
confirmDeliveryOption=1

Probably delivery_option[276] is the thing to change, but I have many questions. The POST method is in this URL: h77ps://punt_ 0d %3vict _0ria.cl/tienda/pedido (remove _, spaces and change numbers for letters, the name is spanish for "victory point"). But I don't know how a POST request could also contain the shopping cart items so the order makes sense.

Any help would be appreciated.
Thanks.

[Onii]

learn fiddler, you can get the whole post request with it

[sebasur4]

learn fiddler, you can get the whole post request with it

Any specific topic? I mean, "learn fiddler" is pretty vague. I've watched some videos now but I don't exactly know what to look for there in order to answer my question v_v.

[Onii]

do this:
https://i.imgur.com/OME8Gec.png

replace domain.com with the site you want to get post request of and then when you click on the submit button you will see the request
also in fiddler options>https>check decrypt https traffic

when you do that you will see something like this:
https://i.imgur.com/B3uYgT1.png

and voila, you got the whole post header which you can send via code however you want. you don't have to use selenium or w/e

[M L T]

Many ways you can do this. Fidder2 as suggested (or burp suite CE is a good alternative), or you can just use the 'network' tab in your browser's devtools. Or a browser plugin/addon such as 'live http headers'

record HTTP requests, perform the reqeust manually, then look at the output of whatever tool you used, find that speific POST request, modify it, and re-send.

[Hooded Robin]

Don't forget to inspect the cookie values that might also be being sent with the form values as this might also be tamperable(sp?) and/or might also contain additional user info specific to your account and cart contents....

[Go0ROM]

I personally prefer ZAP, there is a feature called "break" where you can stop and edit requests, including POST's