HTTP Basic Authentication Basic authentication

HTTP Basic Authentication Basic authentication

Basic authentication is an HTTP access control method that restricts access to site resources. This method does not require a cookie and session, only the client initiates the request, in the header header to submit the user name and password. If not attached, a dialog box pops up asking for a user name and password. This approach is very simple to implement, suitable for small systems such as routers. However, it does not provide information encryption measures, usually in plaintext or base64 encoded transmission.

In network sniffing, Basic authentication information is valuable because such information is often associated with devices such as routers, and there is no decryption problem.

The current period of operation:

(1) Turn on the Wireshark software and grab the bag.

(2) Log on to the local router.

(3) in Wireshark, the data packet containing Basic authentication is filtered directly using the display filter http.authorization.

(4) In the authorization under the HTTP layer, you can see the transmitted information directly. When expanded, you can see the clear text user name and password for the Base64.

HTTP Basic Authentication Basic authentication