From dc33d1f858e9bbc58ae8edf030dbfee208d748f1 Mon Sep 17 00:00:00 2001 From: exploide Date: Thu, 9 Nov 2023 18:14:36 +0100 Subject: [PATCH 1/2] fixed HTTP basic auth parsing when password contains colons fixes #255 --- servers/HTTP.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) mode change 100755 => 100644 servers/HTTP.py diff --git a/servers/HTTP.py b/servers/HTTP.py old mode 100755 new mode 100644 index 6afafce..91acf3f --- a/servers/HTTP.py +++ b/servers/HTTP.py @@ -224,8 +224,8 @@ def PacketSequence(data, client, Challenge): 'module': 'HTTP', 'type': 'Basic', 'client': client, - 'user': ClearText_Auth.decode('latin-1').split(':')[0], - 'cleartext': ClearText_Auth.decode('latin-1').split(':')[1], + 'user': ClearText_Auth.decode('latin-1').split(':', maxsplit=1)[0], + 'cleartext': ClearText_Auth.decode('latin-1').split(':', maxsplit=1)[1], }) if settings.Config.Force_WPAD_Auth and WPAD_Custom: From 90ff1d37a748618b6dbb71446518b15e5715f89e Mon Sep 17 00:00:00 2001 From: exploide Date: Thu, 9 Nov 2023 18:18:43 +0100 Subject: [PATCH 2/2] gitignore: ignore pyc and certificate files --- .gitignore | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.gitignore b/.gitignore index 4f18a99..238411b 100644 --- a/.gitignore +++ b/.gitignore @@ -1,5 +1,11 @@ +# Python artifacts +*.pyc + # Responder logs *.db *.txt *.log +# Generated certificates and keys +certs/*.crt +certs/*.key