Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 38217 - authforce-0.9.6 (new ebuild)
Summary: authforce-0.9.6 (new ebuild)
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All All
: High enhancement (vote)
Assignee: Gentoo Web Application Packages Maintainers
Keywords: EBUILD
Depends on:
Reported: 2004-01-14 14:00 UTC by Daniel Fullmer
Modified: 2004-06-26 17:36 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

authforce-0.9.6.ebuild (authforce-0.9.6.ebuild,783 bytes, text/plain)
2004-01-14 14:01 UTC, Daniel Fullmer
authforce-0.9.6.ebuild (authforce-0.9.6.ebuild,793 bytes, text/plain)
2004-01-15 12:19 UTC, Daniel Fullmer
authforce-0.9.6.ebuild (authforce-0.9.6.ebuild,808 bytes, text/plain)
2004-04-23 13:03 UTC, Daniel Fullmer

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Fullmer 2004-01-14 14:00:28 UTC
Authforce is an HTTP authentication brute forcer. Using various methods, it attempts brute force username and password pairs for a site. It has the ability to try common username and passwords, username derivations, and common username/password pairs. It is used to both test the security of your site and to prove the insecurity of HTTP authentication based on the fact that users just don't pick good passwords.
Comment 1 Daniel Fullmer 2004-01-14 14:01:08 UTC
Created attachment 23821 [details]
Comment 2 Daniel Fullmer 2004-01-15 12:19:35 UTC
Created attachment 23872 [details]

made a stupid error with enabling the USE flags.

 src_compile() {
	[ `use curl` ] || myconf="--without-curl "
-	[ `use nls`  ] || myconf="--disable-nls "
+	[ `use nls`  ] || myconf="${myconf} --disable-nls "
	econf ${myconf} --with-path=/usr/share/${P}:. || die
	emake || die
Comment 3 Stuart Herbert (RETIRED) gentoo-dev 2004-04-23 03:52:49 UTC

Okay, this is now in Portage, and should appear on an rsync mirror near you in about an hour.  Could you test this please, and let me know whether it works or not?

Comment 4 Daniel Fullmer 2004-04-23 13:03:25 UTC
Created attachment 29916 [details]

I didn't know I used to make ebuilds this crappy! ;-)

Well, in the new ebuild I cleaned it up quite a bit.  I also took curl out of
the USE flags.	If you use --without-curl it'll use a dummy submit() function
in src/http.c.	Since all the dummy function does is parse the username and
password files, authforce becomes pretty useless without curl.

Could you test the nls stuff too?  I hardly know anything about nls right now,
since i never need to use it.  I'm thinking about trying it out just to learn
Comment 5 Stuart Herbert (RETIRED) gentoo-dev 2004-06-26 17:36:54 UTC
Okay, I've taken the curl stuff out.  Closing old bug.