Cyber Risks · PortSwigger Research

HTTP Digest Auth

Summary: A third-party Burp Suite extension called HTTP Digest Auth, authored by Pyno and last updated 12 January 2022, adds support for HTTP Digest authentication and works with the Repeater, Scanner and Intruder tools. The author says the extension came out of pentests on IoT devices, mostly IP cameras, where Digest authentication is still in use.

Why it matters: IP cameras and other IoT devices still rely on HTTP Digest authentication, and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions for any particular purpose.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related