PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 04:31:29 +00:00
Code Issues Projects Releases Wiki Activity

Reject supported hash in Proxy-Authorization header

Browse Source 
This should not normally happen, as the hash is expected to match what Ncat 
offered in prior Proxy-Authenticate.  Closes #2440
This commit is contained in:
nnposter
2022-02-08 00:37:36 +00:00
parent 828dedfc8a
commit 854ed0a58a
2 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ncat/http.c
View File

@@ -1456,7 +1456,7 @@ static const char *http_read_credentials(const char *s,
if (str_equal_i(value, "MD5"))
credentials->u.digest.algorithm = ALGORITHM_MD5;
else
credentials->u.digest.algorithm = ALGORITHM_MD5;
credentials->u.digest.algorithm = ALGORITHM_UNKNOWN;
} else if (str_equal_i(name, "qop")) {
if (str_equal_i(value, "auth"))
credentials->u.digest.qop = QOP_AUTH;

6
ncat/http_digest.c
View File

@@ -266,7 +266,8 @@ char *http_digest_proxy_authorization(const struct http_challenge *challenge,
size_t size = 0, offset = 0;
enum http_digest_qop qop;
if (challenge->scheme != AUTH_DIGEST || challenge->realm == NULL
if (challenge->scheme != AUTH_DIGEST
|| challenge->realm == NULL
|| challenge->digest.nonce == NULL
|| challenge->digest.algorithm != ALGORITHM_MD5)
return NULL;
@@ -330,7 +331,8 @@ int http_digest_check_credentials(const char *username, const char *realm,
|| credentials->u.digest.realm == NULL
|| credentials->u.digest.nonce == NULL
|| credentials->u.digest.uri == NULL
|| credentials->u.digest.response == NULL) {
|| credentials->u.digest.response == NULL
|| credentials->u.digest.algorithm != ALGORITHM_MD5) {
return 0;
}
if (credentials->u.digest.qop != QOP_NONE && credentials->u.digest.qop != QOP_AUTH)