vanhauser-thc/thc-hydra

RTSP 451 ERR unknown authentication protocol 9.5 dev

Open

#862 创建于 2023年6月27日

在 GitHub 查看
 (2 评论) (0 反应) (0 负责人)C (8,689 star) (1,913 fork)batch import
help wanted

描述

Auth is not done via rtsp://admin:12345@192.168.5.150, Only the RTSP path like "/user=^USER^&^PASS^=&stream" works. So normal to view the stream in VLC, I would enter rtsp://192.168.5.150/user=^USER^&^PASS^=&stream.

When trying to hydra, I get "[ERROR] unknown authentication protocol" what is on line 138 here https://github.com/vanhauser-thc/thc-hydra/blob/master/hydra-rtsp.c#L138

RTSP status 451 is "Parameter Not Understood" https://www.websitepulse.com/kb/rtsp_status_codes so with a guess, there needs to be some instructions on how to do deal with the RTSP 451?

However im unsure as i dont know what this format would look like on rtsp /user=^USER^&^PASS^=&stream

[daz@linuxhex hydra]$ hydra -d -I -l admin -P testauth -o testout.txt 192.168.5.150 rtsp "/user=^USER^&^PASS^=&stream"
Hydra v9.5 (c) 2023 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

[DEBUG] RECV [pid:1468] (52 bytes):
0000:  5254 5350 2f31 2e30 2034 3531 2045 5252    [ RTSP/1.0 451 ERR ]
0010:  4f52 0d0a 5365 7276 6572 3a20 4832 3634    [ OR..Server: SMART ]
0020:  4456 5220 312e 300d 0a43 7365 713a 2032    [ DVR..Cseq: 2 ]
0030:  0d0a 0d0a                                  [ ....             ]
DEBUG_CONNECT_OK
[DEBUG] SEND [pid:1460] (54 bytes):
0000:  4445 5343 5249 4245 2072 7473 703a 2f2f    [ DESCRIBE rtsp:// ]
0010:  3933 2e34 322e 3735 2e31 3631 3a35 3534    [ 192.168.5.150:554 ]
0020:  2052 5453 502f 312e 300d 0a43 5365 713a    [  RTSP/1.0..CSeq: ]
0030:  2032 0d0a 0d0a                             [  2....           ]
[DEBUG] hydra_receive_line: waittime: 32, conwait: 0, socket: 8, pid: 1460
[ERROR] unknown authentication protocol
DEBUG_DISCONNECT
[ERROR] unknown authentication protocol
DEBUG_DISCONNECT

Without the debug option

[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol
[ERROR] unknown authentication protocol

Arch Linux 9.5 dev

贡献者指南

技术栈
c
领域
securityauthentication
议题类型
feature
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
3
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
half day
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
mostly clear
前置要求
C programming knowledgeRTSP protocol basics
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
30
研究方向
The issue involves handling a non standard RTSP authentication method where credentials are passed as query parameters in the URL. The error occurs in hydra rtsp.c at line 138 (https://github.com/vanhauser thc/thc hydra/blob/master/hydra rtsp.c#L138) where the authentication protocol is determined. A potential fix would involve detecting this authentication style and implementing the appropriate challenge response or parsing the credentials from the URL. The maintainers may need to clarify whether this is a bug or a feature request. Review the existing RTSP authentication implementations in the same file for guidance.