Removed older AMT redirection basic/digest auth.
Ylian Saint-Hilaire committed
Mar 22, 2022 at 09:23 UTC
d7550dfb9a60e993beca459e30edfcc769e76f51
3 files changed
+6
agents/modules_meshcmd/amt-redir-duk.js
+2
@@ -132,6 +132,7 @@ module.exports = function CreateAmtRedirect(module) {
132
// Good Digest Auth (With cnonce and all)
133
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x04) + IntToStrX(obj.user.length + obj.authuri.length + 8) + String.fromCharCode(obj.user.length) + obj.user + String.fromCharCode(0x00, 0x00) + String.fromCharCode(obj.authuri.length) + obj.authuri + String.fromCharCode(0x00, 0x00, 0x00, 0x00));
134
}
135
+ /*
136
else if (authData.indexOf(3) >= 0) {
137
// Bad Digest Auth (Not sure why this is supported, cnonce is not used!)
138
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x03) + IntToStrX(obj.user.length + obj.authuri.length + 7) + String.fromCharCode(obj.user.length) + obj.user + String.fromCharCode(0x00, 0x00) + String.fromCharCode(obj.authuri.length) + obj.authuri + String.fromCharCode(0x00, 0x00, 0x00));
@@ -140,6 +141,7 @@ module.exports = function CreateAmtRedirect(module) {
141
// Basic Auth (Probably a good idea to not support this unless this is an old version of Intel AMT)
142
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x01) + IntToStrX(obj.user.length + obj.pass.length + 2) + String.fromCharCode(obj.user.length) + obj.user + String.fromCharCode(obj.pass.length) + obj.pass);
143
}
144
+ */
145
else obj.Stop();
146
}
147
else if ((authType == 3 || authType == 4) && status == 1) {
amt/amt-redir-mesh.js
+2
@@ -363,6 +363,7 @@ module.exports.CreateAmtRedirect = function (module, domain, user, webserver, me
363
// Good Digest Auth (With cnonce and all)
364
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x04) + webserver.common.IntToStrX(obj.amtuser.length + obj.authuri.length + 8) + String.fromCharCode(obj.amtuser.length) + obj.amtuser + String.fromCharCode(0x00, 0x00) + String.fromCharCode(obj.authuri.length) + obj.authuri + String.fromCharCode(0x00, 0x00, 0x00, 0x00));
365
}
366
+ /*
367
else if (authData.indexOf(3) >= 0) {
368
// Bad Digest Auth (Not sure why this is supported, cnonce is not used!)
369
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x03) + webserver.common.IntToStrX(obj.amtuser.length + obj.authuri.length + 7) + String.fromCharCode(obj.amtuser.length) + obj.amtuser + String.fromCharCode(0x00, 0x00) + String.fromCharCode(obj.authuri.length) + obj.authuri + String.fromCharCode(0x00, 0x00, 0x00));
@@ -371,6 +372,7 @@ module.exports.CreateAmtRedirect = function (module, domain, user, webserver, me
372
// Basic Auth (Probably a good idea to not support this unless this is an old version of Intel AMT)
373
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x01) + webserver.common.IntToStrX(obj.amtuser.length + obj.amtpass.length + 2) + String.fromCharCode(obj.amtuser.length) + obj.amtuser + String.fromCharCode(obj.amtpass.length) + obj.amtpass);
374
}
375
+ */
376
else obj.Stop();
377
/*
378
}
public/scripts/amt-redir-ws-0.1.0.js
+2
@@ -108,6 +108,7 @@ var CreateAmtRedirect = function (module, authCookie) {
108
// Good Digest Auth (With cnonce and all)
109
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x04) + IntToStrX(obj.user.length + obj.authuri.length + 8) + String.fromCharCode(obj.user.length) + obj.user + String.fromCharCode(0x00, 0x00) + String.fromCharCode(obj.authuri.length) + obj.authuri + String.fromCharCode(0x00, 0x00, 0x00, 0x00));
110
}
111
+ /*
112
else if (authData.indexOf(3) >= 0) {
113
// Bad Digest Auth (Not sure why this is supported, cnonce is not used!)
114
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x03) + IntToStrX(obj.user.length + obj.authuri.length + 7) + String.fromCharCode(obj.user.length) + obj.user + String.fromCharCode(0x00, 0x00) + String.fromCharCode(obj.authuri.length) + obj.authuri + String.fromCharCode(0x00, 0x00, 0x00));
@@ -116,6 +117,7 @@ var CreateAmtRedirect = function (module, authCookie) {
117
// Basic Auth (Probably a good idea to not support this unless this is an old version of Intel AMT)
118
obj.xxSend(String.fromCharCode(0x13, 0x00, 0x00, 0x00, 0x01) + IntToStrX(obj.user.length + obj.pass.length + 2) + String.fromCharCode(obj.user.length) + obj.user + String.fromCharCode(obj.pass.length) + obj.pass);
119
}
120
+ */
121
else obj.Stop(2);
122
} else if (((authType == 3) || (authType == 4)) && (status == 1)) {
123
var curptr = 0;