Re: ncat proxy bugs

[David Fifield <david () bamsoftware com>]

On Fri, Jul 16, 2010 at 01:20:22PM +0100, Nuno Gonçalves wrote:
> Only at 5.21, 5.30BETA1 is fixed:
>
> Proxy client digest authentication doesn't work(tested with SQUID server)

This is known. Digest was not implemented in 5.21.

> 5.21 AND 5.30BETA1
>
> Man page have the following text:
>
> --proxy-auth user[:pass] (Specify proxy credentials) .
>            Used to specify proxy authentication credentials for
> client-mode. For use with
>            --proxy-type http, the form should be user:pass. For
> --proxy-type socks4, it should
>            just be a username.
>
> While it seems that authentication is only available as a client, it
> also works as server: Clientes connecting to "ncat -l 2133
> --proxy-type http --proxy-auth maria:pedro" are invited to
> authenticate, and allowed with "maria:pedro".

Thanks, that's a good observation. I've updated the text to read

In connect mode, gives the credentials that will be used to connect to
the proxy server. In listen mode, gives the credentials that will be
required of connecting clients. For use with --proxy-type http, the form
should be user:pass.  For --proxy-type socks4, it should just be a
username.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/