WebApp Sec: RE: Dictionary and brute forcing web authentication?

["Calderon, Juan C (EM, DDEMESIS)" <Juan.Calderon () ge com>]

oh!

I forgot digest method hashes passwords and send it into the header,
that's why.

thanks

-----Original Message-----
From: Martin Eiszner [mailto:martin () websec org]
Sent: Monday, September 15, 2003 6:30 AM
To: Calderon, Juan C (EM, DDEMESIS)
Cc: webappsec () securityfocus com
Subject: Re: Dictionary and brute forcing web authentication?


On Sun, 14 Sep 2003 12:07:22 -0400
"Calderon, Juan C (EM, DDEMESIS)" <Juan.Calderon () ge com> wrote:

> I dont know a tool for brute forcing windows or digest authentication.
> In fact, given those are challenge digests instead of  *direct*
> authentication type, I doubt a tool like that exist.
---*---
http://www.websec.org/tools/digestbrute_pl.html
---*---

nice day,

mEi

-- 
WebSec.org / Martin Eiszner
Austria / EUROPE
mei () websec org
http://www.websec.org

Attachment: smime.p7s
Description: