python - 基本授权凭证不会出现在 Scapy 中？

Question

Note: The scapy layer 'http' is installed with pip install scapy-http

我有以下代码打印 HTTP 请求层中授权值的值:

import sys
from scapy.all import *
from scapy.layers import http
interface = 'wlan0'
def packet(p):
    tcp = p.getlayer('TCP')
    if tcp:
        req = p.getlayer('HTTP Request')
        if req:
            auth = req.Authorization
            if auth:
                print(auth)
try:
    sniff(iface=interface,store=0,filter="tcp and port 80",prn=packet)
except KeyboardInterrupt:
    sys.exit(1)

这应该打印 this wire shark screenshot 中显示的凭证, 但它只打印 b'Basic YWRtaW46RjByZXZlciQ='。这是有原因的吗？

Answer 1

Authorization在您的情况下， header 值恰好是 b'Basic YWRtaW46RjByZXZlciQ=' .这表示使用了基本认证方案，值为<username>:<password> ，base64 编码(在您的情况下为 admin 和 F0rever$)。

你可以这样做:

[...]
            auth = req.Authorization
            if auth and auth.startswith(b'Basic '):
                uname, passw = base64_bytes(auth.split(None, 1)[1]).split(b':', 1)
                print("Username: %r, password: %r" % (uname.decode(), passw.decode()))