NCat Proxy Support - Proxy-Authenticate

[Florian Roth <Neo.X () web de>]

My NCat Proxy authentication fails due to a proxy server issue caused by
a authentication string in ALL CAPS. 


/* HTTP HEADER of proxy response*/

Proxy-Authenticate: NEGOTIATE 
Proxy-Authenticate: NTLM
Proxy-Authenticate: BASIC realm="Company Internet Access"




I guess that the string compare should be case insensitive. I'm not sure
if that fixes the issue. 

/* http.c */

    if (strcmp(scheme, "Basic") == 0) {
        challenge->scheme = AUTH_BASIC;
    } else if (strcmp(scheme, "Digest") == 0) {
        challenge->scheme = AUTH_DIGEST;
    } else {
        challenge->scheme = AUTH_UNKNOWN;
        goto bail;
    }

/* http.c fixed */

    if (strcmp(tolower(scheme), "basic") == 0) {
        challenge->scheme = AUTH_BASIC;
    } else if (strcmp(tolower(scheme), "digest") == 0) {
        challenge->scheme = AUTH_DIGEST;
    } else {
        challenge->scheme = AUTH_UNKNOWN;
        goto bail;
    }





-- 
Sincerely
Saludos cordiales
Mit freundlichen Grüßen
Florian 

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/