Added ClearText WPAD Auth option and Redirect to google.com

Kevin-Robertson / Inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

BSD 3-Clause "New" or "Revised" License

2.44k stars 433 forks source link

Added ClearText WPAD Auth option and Redirect to google.com #3

Closed xorrior closed 8 years ago

Kevin-Robertson commented 8 years ago

Awesome! Can you give me an idea of your test setup to get the prompt and redirect on wpad.dat requests? I have only been able to get a prompt by removing the comment on line 853 and browsing directly to a spoofed host name. Also, the basic realm name and redirect URL would probably be good candidates for parameters. What do you think?

xorrior commented 8 years ago

I think I pre-maturely created this pull request as we are having the same issue. I tested this in a small virtual environment and somehow I thought I had it working without specifically requesting the wpad file. I'll close this and see if I can get it working to prompt without a specific request. Otherwise, the realm name and redirect URL are definitely good ideas for params.

Kevin-Robertson commented 8 years ago

I included some basic auth stuff in the version I just posted to the dev branch, based on your pull request. If you get the redirection working it should be pretty easy to add in. Thanks again!

https://github.com/Kevin-Robertson/Inveigh/commit/4c89ba0e70ff627eb3f792a4389ad3f7bc10438e