S4E just found a high-severity finding from top 10 tcp port service scan
low·Information Scans·Updated Dec 16, 2023

Basic auth Detection Scanner

You can find Basic authentication mechanism using this tool.

Est. Time~5 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.1k
Times Used
continuous scan runs
3.4k
Continuously Checked
assets under CS
162
Vulnerabilities Found
confirmed findings
References
Detail

HTTP basic authentication represents a mechanism of challenge and response to help the server make a request authentication from a client, passing the User ID and password in the URL as the standard HTTP “Authorization” header. For example: https://username:[email protected]/example-page.php.


If remote web server contains web pages that are protected by 'Basic' authentication over cleartext, an attacker eavesdropping the traffic might obtain logins and passwords of valid users.

Solution Advice

Make sure that HTTP authentication is transmitted over HTTPS.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.