aspose file tools*
The moose likes Web Services and the fly likes please help me out how to find http header password? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Spring in Action this week in the Spring forum!
JavaRanch » Java Forums » Java » Web Services
Bookmark "please help me out how to find http header password?" Watch "please help me out how to find http header password?" New topic
Author

please help me out how to find http header password?

garry singh
Greenhorn

Joined: May 01, 2013
Posts: 4
I have to give a exam but didn't passed it had question Q- The password is being sent in the HTTP Headers. Enter it Below?
How to find out this on chrome do i have to go to developer tools or have some software
And last question was
Q- Enter the Password?
Please help me how to find password by http headers i will be very thankfull
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 42280
    
  64
I think we need more context to help you out. While there is an authentication method that passes user name and password in the HTTP headers (called Basic Authentication), if you assume it being sent by a browser then you wouldn't need anything to retrieve it, because it would only be sent if you earlier typed it in - so you would already know it.

If we leave aside the browser and consider HTTP communication more generally, then the question makes more sense, but you couldn't use a browser-based tool (like the Firefox extension LiveHTTPHeaders) to observe the HTTP traffic because there wouldn't be a browser involved.

So, it's not clear what that question asks. I'm also confused that both questions basically seem to ask the same thing; is there maybe something that they refer to?


Ping & DNS - my free Android networking tools app
garry singh
Greenhorn

Joined: May 01, 2013
Posts: 4
I think wireshark can know the password sent by http header i am trying to use wireshark as it is CISE exam the question was http header is sending password i think via wireshark program i have to search for GET in http and see if i find any password there
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 42280
    
  64
Wireshark would work as well. It's not so much GET requests you need to look out for (any HTTP method can have passwords sent along, not only GET), but HTTP requests that have a header called "Authorization". That contains the base64-encoded username and password.
garry singh
Greenhorn

Joined: May 01, 2013
Posts: 4
Thank you sir you are very kind and very fast reply i learned how to get username and password via wireshark from "POST" http section after starting wireshark and then tcp follow up and find user name and password,If in case an http header is sending me a password will it be the same way to find out as i found username and password by "POST" after starting and logging into on some site and now if site is sending me password i will go to search http "GET" post and tcp follow up then and then in that i have to search for password will i find a password as i have to give exam again tommorow so that link will send password by http header will i be find out in the GET post?or some other post as you said Authentication?sorry my english is not very good hope you understand what i am trying to say thankyou for reply
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 42280
    
  64
Please get in the habit of using punctuation, your post is very hard to read.

I'm actually not entirely sure what you're asking, bit it seems that you have some misconceptions. First, as I said, using HTTP Basic Authentication -please read its Wikipedia article to learn more about it- can be attached to any HTTP method, there's no special significance whether it's GET or POST or one of the other methods.

Second, a server will never send a password to the client via an Authorization header, only the client (meaning the browser in this case) sends it to the server.

But as I said, you haven't given enough context, it is possible that the question asks about something entirely different.
garry singh
Greenhorn

Joined: May 01, 2013
Posts: 4
i am sorry for english well it will be something simple to crack i will give exam tommorow and tell what was it thankyou sir have a nice day,Yes many americans have said about my Punctuation,i guess i just type it very quickly,i will work on it takecare have a good day sir
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: please help me out how to find http header password?