Description

This detector identifies web applications that use HTTP Digest Authentication over unencrypted HTTP connections. While Digest Authentication is more secure than Basic Authentication, transmitting it over HTTP still exposes authentication credentials to man-in-the-middle attacks and network eavesdropping, compromising user security.

Detection Strategy

• The target URL must use the HTTP protocol (not HTTPS)

• The HTTP response must contain a WWW-Authenticate header

• The WWW-Authenticate header must specify 'digest' as the authentication type