Merge pull request #256 from exploide/basic-auth-fix

Fixed parsing of HTTP basic auth containing colons
This commit is contained in:
lgandx 2023-11-17 10:09:08 -03:00 committed by GitHub
commit 351b1aad9e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 2 deletions

6
.gitignore vendored
View file

@ -1,5 +1,11 @@
# Python artifacts
*.pyc
# Responder logs
*.db
*.txt
*.log
# Generated certificates and keys
certs/*.crt
certs/*.key

4
servers/HTTP.py Executable file → Normal file
View file

@ -224,8 +224,8 @@ def PacketSequence(data, client, Challenge):
'module': 'HTTP',
'type': 'Basic',
'client': client,
'user': ClearText_Auth.decode('latin-1').split(':')[0],
'cleartext': ClearText_Auth.decode('latin-1').split(':')[1],
'user': ClearText_Auth.decode('latin-1').split(':', maxsplit=1)[0],
'cleartext': ClearText_Auth.decode('latin-1').split(':', maxsplit=1)[1],
})
if settings.Config.Force_WPAD_Auth and WPAD_Custom: