lighttpd/stdout.nl: Add authentication for /beef.
authorMatthijs Kooijman <matthijs@stdin.nl>
Mon, 20 Feb 2012 14:01:57 +0000 (15:01 +0100)
committerMatthijs Kooijman <matthijs@stdin.nl>
Mon, 20 Feb 2012 14:01:57 +0000 (15:01 +0100)
Beef is a browser exploit framework, useful for testing XSS
vulnerabilities.

etc/lighttpd/vhosts/stdout-nl

index 1fbb4e4f1d46e17270144c7ab58aec07b0588f9b..1bd9fb89273b98e98521fefbe28428ffdfa20c07 100644 (file)
@@ -19,4 +19,18 @@ $HTTP["host"] =~ ".stdout.nl$" {
                # Enable dirlistings for /tmp
                server.dir-listing = "enable"
        }
+
+       $HTTP["url"] =~ "^/beef/" {
+               auth.backend                   = "htpasswd"
+               auth.backend.htpasswd.userfile = var.site-dir + "/conf/beef.user"
+
+               auth.require = ( 
+                       "/" => (
+                               "method"  => "basic",
+                               "realm"   => "Beef",
+                               "require" => "valid-user"
+                       )
+               )
+       }
+
 }