.

Computer Forensics Comp

<<

CrzyAzn

Newbie
Newbie

Posts: 1

Joined: Mon Oct 04, 2010 2:12 pm

Post Mon Oct 04, 2010 2:20 pm

Computer Forensics Comp

Hi guys. I'm new here.  I'm participating in a computer forensics competition and I'm stuck right now.

I'm trying to work my way into the mail accounts of users on a mock social networking site that uses basic HTTP authentication.  Brute force is not allowed by the rules and guessing passwords hasn't proved very useful.

Any tips on how to bypass or crack basic HTTP authentication?  I'd greatly appreciate any help.

Thanks!
<<

gnix

Newbie
Newbie

Posts: 4

Joined: Sat Jun 13, 2009 11:43 pm

Post Tue Nov 30, 2010 7:39 pm

Re: Computer Forensics Comp

Hi CrzyAzn. If it's a computer forensics competition, I suppose you have to deal with some kind of .pcap file. If so, just open it with Wireshark, filter only HTTP requests (http.request) and look for a request that contains the "Authorization" header line. Once you found it, you will need to decode the base64 string that follows the "basic" (on the header line) to get the credentials.

gnix

ps: Wireshark has also a http.authbasic filter which should allow you to filter every basic HTTP authentication request. However, I've never had the opportunity to test this expression.
<<

R3B005t

Newbie
Newbie

Posts: 43

Joined: Wed Mar 09, 2011 9:03 am

Location: NVA/D.C.

Post Mon Mar 21, 2011 1:59 pm

Re: Computer Forensics Comp

CrzyAzn wrote:Hi guys. I'm new here.  I'm participating in a computer forensics competition and I'm stuck right now.

I'm trying to work my way into the mail accounts of users on a mock social networking site that uses basic HTTP authentication.  Brute force is not allowed by the rules and guessing passwords hasn't proved very useful.

Any tips on how to bypass or crack basic HTTP authentication?  I'd greatly appreciate any help.

Thanks!



If it was facebook based you could easily access it through the developers api.  If its a .pcap file that requires analysis then gnix got the hook up!

Return to Forensics

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software