HTTP basic Certification Basic Authentication

HTTP basic Certification Basic Authentication

Basic Authentication is a HTTP access control method used to restrict access to website resources. This method does not require Cookie and Session, but only requires the user name and password to be submitted in the header Header when the client initiates the request. If there is no attachment, a dialog box pops up asking for a user name and password. This approach is very simple to implement and is suitable for small systems such as routers. However, it does not provide information encryption measures and is usually transmitted in plaintext or base64 coding.

In network sniffing, Basic Authentication information is very valuable because it is often related to devices such as routers, and there is no hassle of decryption.

This assignment:

(1) Open the Wireshark software to grab the package.

(2) Log in to the local router.

(3) in Wireshark, the display filter http.authorization is used to filter out the packets containing Basic Authentication directly.

(4) in the Authorization under the HTTP layer, the transmitted information can be seen directly. After expanding, you can see the clear text username and password to remove the Base64.