WebApp Sec mailing list archives

Re: NTLM and man-in-the-middle proxies not working


From: Eoin Keary <eoinkeary () gmail com>
Date: Mon, 19 Sep 2005 10:52:10 +0000

I find Burp works well for MITM stuff

On 16/09/05, Amit Klein (AKsecurity) <aksecurity () hotpop com> wrote:
On 15 Sep 2005 at 15:42, raymond_b_jimenez () yahoo com wrote:


Most interesting is the fact that IE passes IWA credentials over a proxy. I had put in a demo environment, and I 
did sucessfully manage to use IE/IWA through a proxy (in this case Odysseus). Just in case, I tested it again and 
it does pass IWA through proxy.


Weird. I double checked (this time I used Odysseus, 2.0B10), but no good, my IE
(6.0.3790.0) doesn't even ask me for the NTLM credentials when it's configured with a
forward proxy. What's your IE version? Can other people check this please?




Current thread: