Comments (6)
As it turns out, InternetCrackUrl already supports extracting a username and password in a URL.
This commit should support authentication when the URL contains username and password.
Example: https://username:[email protected]/
If you still have problems with this, feel free to reopen the issue.
from donut.
It could be implemented using INTERNET_OPTION_USERNAME and INTERNET_OPTION_PASSWORD flags for the InternetSetOption API. What setup do you have? What server are you using to host the module?
from donut.
Will add this for v0.9.3. I can assign this one to myself. I will use this server for testing: https://github.com/http-party/http-server
from donut.
Received a request to allow for complete compatibility with WebDav, which can use either HTTP Basic Auth or Digest Auth. It can also be configured to use NTLM/Kerberos authentication. Wininet supports all of the above, I think: https://docs.microsoft.com/en-us/windows/win32/wininet/handling-authentication
To start with, will just add support for Basic Auth. If adding support for the others does not add too much complexity, will add them too.
from donut.
The parsing now supports short or long options like -e or --entropy. This will need plenty of testing, but just as an example, there's --user: option that stores string in auth buffer of DONUT_CONFIG...change to whatever you like. --auth maybe? Whatever user provides will still need to be split before passing to InternetSetOption in http_client.c. I'm assuming WinInet handles authentication once it has a username/password set.
from donut.
Nice! I added that format to the readme and help message
from donut.
Related Issues (20)
- Support for executables without relocation data HOT 2
- How does work on 32bit
- Huffman in version 1.0
- A generator written in pure Go, supporting Donut v1.0
- Add support for resources HOT 1
- TLS handling referencing the wrong headers
- shellcode gen with error?
- capturing stdout of a donut HOT 1
- Running donut only brings up help menu HOT 4
- Suggestion on encoding the loader HOT 1
- [Feature] - ARM64 support HOT 2
- Rsp adjustment breaks shellcode return HOT 1
- Files with SEH support HOT 2
- Shellcode terminates main thread HOT 1
- Module overloading does not work
- Does donut supports injecting into processes with Dynamic Code Prohibited enabled
- No execution with Akagi64 (UACME) HOT 1
- New Detections on AMSI Patch and Headers
- Problem executing Golang binaries HOT 2
- Anti Dump for .Net assemblies
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from donut.