Andres, On Jun 10, 2009, at 9:00 AM, Andres Riancho wrote:
> m0ses, > > On Wed, Jun 10, 2009 at 12:09 AM, > mOses<trklis...@networksamurai.org> wrote: > > Ahh, on a related note... could you also tell us how to setup Apache > to support ntlm, so we can actually test your code? > >> >>>> Thanks, I was hoping to find a way to contribute, the project is >>>> awesome! >>> >>> =) >>> >>>> Moses Hernandez >>>> http://soon.ibreakapps.com >>>> Typically here is how I setup NTLM authentication on a Windows XP Device (Similar to Vista). ***NOTE: This is not how I am testing it. I have a VMWare image of Windows 2003 R2 with IIS and Sharepoint to deliver NTLM authentication, although what I am going to show you in XP can work as well. 1. Installing IIS -> From windows XP (possibly also vista) a. Start - Run - appwiz.cpl b. Choose Add / Remove Components c. Click IIS and Choose 'Details' d. Click on World Wide Web Publishing Service e. Click OK until it asks you for the Windows XP (or vista) installation CD. Once this is done. You can then configure IIS (Ensure in the Control Panel you are using 'Classic View') 2. Start -> Control Panel -> Administrative Tools -> Internet Information Services a. In IIS hit the + until you see 'Default Web Site'. b. Right Click on 'Default Web Site' and choose Properties c. Hit the 'Directory Security Tab' d. Under Anonymous access and Authentication Control hit Edit e. Uncheck Anonymous Access f. Check Integrated Windows Authentication Once you are done you can then choose Ok and Ok. If you 'browse' to this site Using a web browser that is not running on that XP system in order to see the 'authentication window' Conversely if you use w3af to audit your local site you'll be 'unable' to because of the NTLM authentication requirement of this. Finally you should also 'note' that I you will need to either turn of your XP firewall or 'Allow' PORT 80. ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop
