Penetration Testing
Can Hydra Brute Force HTTP Digest Authentication? Aug 18 2011 04:08AM
Zaki Akhmad (zakiakhmad gmail com) (2 replies)
Hi,

I'd like to know whether hydra can brute force HTTP digest authentication?

From the OWASP Testing document[1], I only found brute force:
- HTTP basic authentication
- HTML Form Based Authentication

[1] https://www.owasp.org/index.php/Testing_for_Brute_Force_%28OWASP-AT-004%
29#Brute_force_Attacks

--
Zaki Akhmad

------------------------------------------------------------------------

This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[ reply ]
Re: Can Hydra Brute Force HTTP Digest Authentication? Aug 26 2011 12:30AM
Steve Pinkham (steve pinkham gmail com)
Re: Can Hydra Brute Force HTTP Digest Authentication? Aug 25 2011 07:46PM
David Maciejak (david maciejak gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus