Challenge 7: Difficulty Level: Intermediate

Hint:

The website admin went to the local cafe to grab a coffee. He received a call from his team who urgently request him to login to the website and upload file. As the site uses HTTP Digest authentication, he feels confident that his password is never sent over the network. He connects to the Cafe Wi-Fi and me being the Wi-Fi guy, I managed to capture the HTTP Digest exchange :) Please help me find the username and password so I can get a pentest contract from them :)

  1. Usernames: nick, jack, vivek, admin, webadmin, sqladmin, jill, natasha
  2. HTTP Authentication Password Complexity: 6 characters and uses only x,1,2,y,z,3 lowercase. Password examples - 112233, xyxz12 etc.
  3. PCAP File with HTTP Digest Authentication exchange
  4. You could try scripting your own tool using Python or other languages
  5. Think about all you've learnt at Pentester Academy :)