[Mndz1414]

Code

AuthName "Restricted Area"
AuthType Basic
AuthUserFile /home/xxx/.htpasswd
AuthGroupFile /dev/null
require valid-user

Hi, I was trying instead of sending a "GET" a "GETS" to perform the bypass but it does not work. Should this be possible?

Thanks!

[telmutraider]

Code

AuthName "Restricted Area"
AuthType Basic
AuthUserFile /home/xxx/.htpasswd
AuthGroupFile /dev/null
require valid-user

Hi, I was trying instead of sending a "GET" a "GETS" to perform the bypass but it does not work. Should this be possible?

Thanks!

No, it's protected by the Apache server which goes an checks the Linux OS for accounts on that Linux machine, and if it gets a user/password match it will only then let you through.

The weakness of AuthType Basic though is usually it allows unlimited retries. So you can use something like Hydra to try a million guesses. It would help if you knew or could narrow down the username though.