Adding support for digest authentication

In this section, we're going to start learning about what digest authentication is. Then, we're going to modify our password BruteForcer to support this method, and finally, we're going to test the new script against our test web application.

What is digest authentication?

Digest authentication is a more secure option to basic authentication. It uses MD5 to do the hashing of the username and password plus a nonce. The nonce is used to prevent replay attacks, and it is sent by the server after the user requests a protected resource. The browser creates the response with the following code:

Finally, the response is an MD5 hash of HA1 nonce HA2. The realm value defines...