Bug 38217 – authforce-0.9.6 (new ebuild)

• Product: Gentoo Linux
• Status: VERIFIED TEST-REQUEST

[Description Daniel Fullmer 2004-01-14 14:00:28 UTC]

From http://kapheine.hypa.net/authforce/:
Authforce is an HTTP authentication brute forcer. Using various methods, it attempts brute force username and password pairs for a site. It has the ability to try common username and passwords, username derivations, and common username/password pairs. It is used to both test the security of your site and to prove the insecurity of HTTP authentication based on the fact that users just don't pick good passwords.

[Comment 1 Daniel Fullmer 2004-01-14 14:01:08 UTC]

Created attachment 23821 [details]
authforce-0.9.6.ebuild

[Comment 2 Daniel Fullmer 2004-01-15 12:19:35 UTC]

Created attachment 23872 [details]
authforce-0.9.6.ebuild

made a stupid error with enabling the USE flags.

 src_compile() {
	[ `use curl` ] || myconf="--without-curl "
-	[ `use nls`  ] || myconf="--disable-nls "
+	[ `use nls`  ] || myconf="${myconf} --disable-nls "
	econf ${myconf} --with-path=/usr/share/${P}:. || die
	emake || die
 }

[Comment 3 Stuart Herbert (RETIRED) 2004-04-23 03:52:49 UTC]

Hiya,

Okay, this is now in Portage, and should appear on an rsync mirror near you in about an hour.  Could you test this please, and let me know whether it works or not?

Thanks,
Stu

[Comment 4 Daniel Fullmer 2004-04-23 13:03:25 UTC]

Created attachment 29916 [details]
authforce-0.9.6.ebuild

I didn't know I used to make ebuilds this crappy! ;-)

Well, in the new ebuild I cleaned it up quite a bit.  I also took curl out of
the USE flags.	If you use --without-curl it'll use a dummy submit() function
in src/http.c.	Since all the dummy function does is parse the username and
password files, authforce becomes pretty useless without curl.

Could you test the nls stuff too?  I hardly know anything about nls right now,
since i never need to use it.  I'm thinking about trying it out just to learn
more.

[Comment 5 Stuart Herbert (RETIRED) 2004-06-26 17:36:54 UTC]

Okay, I've taken the curl stuff out.  Closing old bug.