Re: [Spike] Re: IIS 5.0 with Integrated Window Authentication

I'm proud to announce that SPIKE Proxy v 1.4.5, released today, fully supports NTLM authentication.

Thanks to:

Dmitry A. Rozmanov <dima@xenon.spb.ru>, without his pure Python GPLed NTLM library, this would not be possible.

Please feel free to contact myself for any patches, questions, or additional information regarding SPIKE Proxy.

Dave Aitel
Immunity, Inc.
http://www.immunitysec.com/spike.html

CHANGELOG.txt follows:
1.4.5
Nov 7, 2002

Added NTLM support. See the Usage statement for how to use it. It should be otherwise transparent. It was tested on IIS 5.0, so your milage may vary. Example:
./spkproxy.py -U Administrator -P jbone -D localhost will automatically log in as Administrator with the password of jbone and the domain of localhost wherever presented with an NTLM challenge. This works even during scans, although scans will now take 3 times as long.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Added "ordering" to arguments, since that was causing some problems with some applications.

Added Frostman's SPIKE Proxy Usage document to directory.

Fixed other associated bugs, some of which were quite bad, so do upgrade.

Added Auto-Version-Check. You can disable this in spkproxy.py if it bugs you. Received on Sat Nov 9 02:01:25 2002