Giters

eric-conrad / digestive

Dictionary cracking tool for HTTP Digest challenge/response hashes

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

no pw found depending on "digest" parameter

ivityc opened this issue · comments

commented

Hi
I've tried the tool as part of the SANS542 training, during an exercise I noticed that the expected results was failing.
Basically no password was identified. After several test I figure out that if I leave the "/" char at the end of the "--uri" parameter the pw is not found .

so this works (/digest)
digestive --wordlist /opt/john/run/password.lst --username trillian --realm Security542 --uri /digest --qop auth --nc 00000001 --method GET --nonce y55hehYCBgA=b5e1e35bb64d45ffb508c61209d7f4970a6457c1 --response 690cc7fc7db3634475efe8a4e12646cf --cnonce 5da2ec5e8eebb9b1

this does not work (/digest/)

digestive --wordlist /opt/john/run/password.lst --username trillian --realm Security542 --uri /digest/ --qop auth --nc 00000001 --method GET --nonce y55hehYCBgA=b5e1e35bb64d45ffb508c61209d7f4970a6457c1 --response 690cc7fc7db3634475efe8a4e12646cf --cnonce 5da2ec5e8eebb9b1

but using your example in github works fine with the "/" at the end of digest...

what am I doing wrong ?
Thanks for helping