From: Death Star (deathstaroptonline.net)
Date: Tue Jun 17 2003 - 12:23:01 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I've seen it in C scripts. Example
http://packetstorm.linuxsecurity.com/UNIX/cgi-scanners/httpscan-v200.c
This script would check the header of the webserver. You can customize
this script to return the method of authentication based on the returned
buffer.
To use this script on Microsoft you need cygwin.dll in your system32
directory.

-----Original Message-----
From: Joe - [mailto:boomerangfishyhotmail.com]
Sent: Tuesday, June 17, 2003 12:29 PM
To: webappsecsecurityfocus.com
Subject: RE: check authentication-methods

There is a valid reason for an automated tool to check authentication
methods. On several large web portals, one might find several different

authentication methods for any number of site paths. I've seen this on
a
few occasions. Yet I have not seen it in any automated tool.
-Joe R.

-----Original Message-----
From: Dennis Hurst [mailto:dennishurstinc.com]
Sent: Saturday, June 14, 2003 11:17 PM
To: 'Thomas Springer'; webappsecsecurityfocus.com
Subject: RE: check authentication-methods

Thomas,

You could just Telnet to the web server on port 80 and send a simple GET
/ request, then look at the headers that come back. Here an example of
what comes back from IIS.

Server: Microsoft-IIS/5.0
Date: Sun, 15 Jun 2003 04:15:03 GMT
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 4431
Content-Type: text/html

The WWW-Authenticate: NTLM header tells you it's asking for NTLM. If
it's using basic it will have BASIC in the header.

Here's how I did it

At a command prompt type: telnet <your web server> 80 <press enter>
You will get a blank screen, type GET / <press enter>
You will get the headers dumped back to you.

Hope this helps.

Have a great day,

Dennis Hurst
dhurstspidynamics.com
SPI Labs

-----Original Message-----
From: Thomas Springer [mailto:tuevserveraudit.net]
Sent: Friday, June 13, 2003 7:00 AM
To: webappsecsecurityfocus.com
Subject: check authentication-methods

Anybody knows a tool (prefferably win32) to check, wich
401-authentication-methods are supported by a webserver (i.e. basic,
ntlm)?

thomas springer
tuev-sueddeutschland
it-security

Thomas Springer

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE*
http://join.msn.com/?page=features/virus

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]