A program that automatically authenticates the user on a Cisco ASA Gateway by sending credentials via HTTP POST.
WHT-Auth tries to ping one of several domains to check your connection status. If the ping timeouts, a login is attempted.
To login, a HTTPS GET is sent to the login page and then a POST containing the username and password. The information is encrypted by SSL and not send anywhere else.
The username is saved in plain text and the password encoded in Base64, so it is no problem to read and decode it with access to the computer. Where exactly the information is saved depends on the computer configuration.
Comments