FEATURES: Password Verification, Signature Formatting, Credential Testing against WWW-Authenticate realms by redsand · Pull Request #620 · RedSiege/EyeWitness

Commits on Jul 24, 2023

Feature to add testing of default credentials. still need to include the data in reporting
redsand
committed

Commits on Jul 25, 2023

Feature: properly check and detect WWW-Authenticate protected realms. Includes new signatures to match Server and/or WWW-Authenticate headers
redsand
committed
BUG: fix check to only validate WWW-Authenticate header is present
redsand
committed
BUG: fixing error during reporting of mixed types of bytes and strings and suppress debugging of screenshots
redsand
committed
Merging from foreign master
redsand
committed
FEATURE: add new screenshots to report for visibility, along with a table detailing results of each attempt.
redsand
committed
BUG: fixing formatting of html to display additional screenshots
redsand
committed
Scrubbing debugging info
redsand
committed

Commits on Jul 26, 2023

Commits on Aug 2, 2023

Adds check for empty passwords as well as asignature for WEB Remote Viewer
redsand
committed

Commits on Aug 7, 2023

Commits on Aug 8, 2023

Commits on Aug 11, 2023

SIGS: Adding signatures for additional Polycom phones.
redsand
committed

Commits on Aug 15, 2023

Commits on Jun 14, 2024

Merge branch 'master' into FEATURE_PASSWORD_VERIFICATION
Relkci
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

FEATURES: Password Verification, Signature Formatting, Credential Testing against WWW-Authenticate realms#620

FEATURES: Password Verification, Signature Formatting, Credential Testing against WWW-Authenticate realms#620
redsand wants to merge 21 commits intoRedSiege:masterfrom
redsand:FEATURE_PASSWORD_VERIFICATION

Commits on Jul 24, 2023

Feature to add testing of default credentials. still need to include the data in reporting

Commits on Jul 25, 2023

Feature: properly check and detect WWW-Authenticate protected realms. Includes new signatures to match Server and/or WWW-Authenticate headers

BUG: fix check to only validate WWW-Authenticate header is present

BUG: fixing error during reporting of mixed types of bytes and strings and suppress debugging of screenshots

Merging from foreign master

FEATURE: add new screenshots to report for visibility, along with a table detailing results of each attempt.

BUG: fixing formatting of html to display additional screenshots

Scrubbing debugging info

Commits on Jul 26, 2023

BUG: fix selenium driver leak

Adding Rico IPP-Print signature for realm

BUG: fix overwriting of authentication screenshots

Commits on Aug 2, 2023

Adds check for empty passwords as well as asignature for WEB Remote Viewer

Commits on Aug 7, 2023

Feature is disabled by default. Also allows to log validated credentials results to file for automation

cleanup

Commits on Aug 8, 2023

Fixing false positive when performing uri authentication detection

FIX: fix auth false positive

Commits on Aug 11, 2023

SIGS: Adding signatures for additional Polycom phones.

Commits on Aug 15, 2023

Add additional failure detection to form authentication testing.

Re-adding <blank> marker.

Treating <blank> as an empty string

Commits on Jun 14, 2024

Merge branch 'master' into FEATURE_PASSWORD_VERIFICATION