RTSP 451 ERR unknown authentication protocol 9.5 dev · vanhauser-thc/thc-hydra#862

(2 comments) (0 reactions) (0 assignees)C (8,689 stars) (1,913 forks)batch import

help wanted

説明

Auth is not done via rtsp://admin:12345@192.168.5.150, Only the RTSP path like "/user=^USER^&^PASS^=&stream" works. So normal to view the stream in VLC, I would enter rtsp://192.168.5.150/user=^USER^&^PASS^=&stream.

When trying to hydra, I get "[ERROR] unknown authentication protocol" what is on line 138 here https://github.com/vanhauser-thc/thc-hydra/blob/master/hydra-rtsp.c#L138

RTSP status 451 is "Parameter Not Understood" https://www.websitepulse.com/kb/rtsp_status_codes so with a guess, there needs to be some instructions on how to do deal with the RTSP 451?

However im unsure as i dont know what this format would look like on rtsp /user=^USER^&^PASS^=&stream

[daz@linuxhex hydra]$ hydra -d -I -l admin -P testauth -o testout.txt 192.168.5.150 rtsp "/user=^USER^&^PASS^=&stream"
Hydra v9.5 (c) 2023 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

[DEBUG] RECV [pid:1468] (52 bytes):
0000:  5254 5350 2f31 2e30 2034 3531 2045 5252    [ RTSP/1.0 451 ERR ]
0010:  4f52 0d0a 5365 7276 6572 3a20 4832 3634    [ OR..Server: SMART ]
0020:  4456 5220 312e 300d 0a43 7365 713a 2032    [ DVR..Cseq: 2 ]
0030:  0d0a 0d0a                                  [ ....             ]
DEBUG_CONNECT_OK
[DEBUG] SEND [pid:1460] (54 bytes):
0000:  4445 5343 5249 4245 2072 7473 703a 2f2f    [ DESCRIBE rtsp:// ]
0010:  3933 2e34 322e 3735 2e31 3631 3a35 3534    [ 192.168.5.150:554 ]
0020:  2052 5453 502f 312e 300d 0a43 5365 713a    [  RTSP/1.0..CSeq: ]
0030:  2032 0d0a 0d0a                             [  2....           ]
[DEBUG] hydra_receive_line: waittime: 32, conwait: 0, socket: 8, pid: 1460
[ERROR] unknown authentication protocol
DEBUG_DISCONNECT
[ERROR] unknown authentication protocol
DEBUG_DISCONNECT

Without the debug option

[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol

Arch Linux 9.5 dev

コントリビューターガイド

技術スタック: c
領域: securityauthentication
Issue 種別: feature
難度: 3
推定時間: half day
活動状況: stale
明確さ: mostly clear
前提条件: C programming knowledgeRTSP protocol basics
初心者向け度: 30
調査方針: The issue involves handling a non standard RTSP authentication method where credentials are passed as query parameters in the URL. The error occurs in hydra rtsp.c at line 138 (https://github.com/vanhauser thc/thc hydra/blob/master/hydra rtsp.c#L138) where the authentication protocol is determined. A potential fix would involve detecting this authentication style and implementing the appropriate challenge response or parsing the credentials from the URL. The maintainers may need to clarify whether this is a bug or a feature request. Review the existing RTSP authentication implementations in the same file for guidance.