Анатомия безопасности XMPP

Решал я таски на Root-Me и попалась таска XMPP - authentication . Основная цель таски состояла в том, чтобы по захвату пакетов вытащить пароль, который использовался при аунтефикации и я начал искать документацию к тому, как работает аунтефикация клиента.

https://habr.com/ru/articles/920912/

#xmpp #sasl #аунтефикация #scram #информационная_безопасность #криптография #ctf #rootme

#ConverseDesktop 11.0.1 has been released (#XMPP / #Jabber / #Converse / #ConverseJS / #StropheJS / #JavaScript / #inVerse / #OMEMO / #WebClient / #WebChat / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #XEP0474) https://conversejs.org/

#Converse.js 11.0.1 has been released (#XMPP / #Jabber / #ConverseJS / #StropheJS / #JavaScript / #inVerse / #OMEMO / #WebClient / #WebChat / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #XEP0474) https://conversejs.org/

#StropheJS 3.1.1 has been released (#XMPP / #Jabber / #JavaScript / #Strophe / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512) http://strophe.im/strophejs/

#curl 8.14.1 has been released (#libcurl / #Haxx / #DICT / #FILE / #FTP / #FTPS / #Gopher / #HTTP / #HTTPS / #IMAP / #IMAPS / #LDAP / #LDAPS / #MQTT / #POP3 / #POP3S / #RTMP / #RTMPS / #RTSP / #SCP / #SFTP / #SMB / #SMBS / #SMTP / #SMTPS / #Telnet / #TFTP / #WebSocket / #SOCKS4 / #SOCKS5 / #SCRAM / #TLS / #HTTP2 / #HTTP3) https://curl.se/

#curl 8.14.0 has been released (#libcurl / #Haxx / #DICT / #FILE / #FTP / #FTPS / #Gopher / #HTTP / #HTTPS / #IMAP / #IMAPS / #LDAP / #LDAPS / #MQTT / #POP3 / #POP3S / #RTMP / #RTMPS / #RTSP / #SCP / #SFTP / #SMB / #SMBS / #SMTP / #SMTPS / #Telnet / #TFTP / #WebSocket / #SOCKS4 / #SOCKS5 / #SCRAM / #TLS / #HTTP2 / #HTTP3) https://curl.se/

#Prosody 13.0.2 has been released (#XMPP / #Jabber / #ProsodyIM / #Lua / #lxmppd / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256) https://prosody.im/

#Converse.js 11.0.0 has been released (#XMPP / #Jabber / #ConverseJS / #StropheJS / #JavaScript / #inVerse / #OMEMO / #WebClient / #WebChat / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #XEP0474) https://conversejs.org/

#Gajim 2.2.0 has been released (#Jabber / #XMPP / #XMPPClient / #JabberClient / #Python / #nbxmpp / #pythonnbxmpp / #OMEMO / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512) https://gajim.org/

#nbxmpp 6.2.0 has been released (#pythonnbxmpp / #XMPP / #Jabber / #Python / #Gajim / #SCRAM / #SCRAMSHA) https://dev.gajim.org/gajim/python-nbxmpp

#GoXMPP 0.2.14 has been released (#XMPP / #Jabber / #Go / #GoLang / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #TLSChannelBinding / #RFC9266) https://github.com/xmppo/go-xmpp

#curl 8.13.0 has been released (#libcurl / #Haxx / #DICT / #FILE / #FTP / #FTPS / #Gopher / #HTTP / #HTTPS / #IMAP / #IMAPS / #LDAP / #LDAPS / #MQTT / #POP3 / #POP3S / #RTMP / #RTMPS / #RTSP / #SCP / #SFTP / #SMB / #SMBS / #SMTP / #SMTPS / #Telnet / #TFTP / #WebSocket / #SOCKS4 / #SOCKS5 / #SCRAM / #TLS / #HTTP2 / #HTTP3) https://curl.se/

#Gajim 2.1.1 has been released (#Jabber / #XMPP / #XMPPClient / #JabberClient / #Python / #nbxmpp / #pythonnbxmpp / #OMEMO / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512) https://gajim.org/

#ejabberd 25.04 has been released (#XMPP / #XMPPServer / #Jabber / #MQTT / #SIP / #Erlang / #ProcessOne / #Matrix / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #TLSChannelBinding / #RFC9266 / #SASL2) https://www.ejabberd.im/

#Prosody 13.0.1 has been released (#XMPP / #Jabber / #ProsodyIM / #Lua / #lxmppd / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256) https://prosody.im/

#GSASL 2.2.2 has been released (#GNU / #SASL / #GNUSASL / #libgsasl / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA1PLUS / #SCRAMSHA256 / #SCRAMSHA256PLUS / #RFC5929 / #RFC9266) https://gnu.org/software/gsasl/

#ejabberd 25.03 has been released (#XMPP / #Jabber / #MQTT / #SIP / #Erlang / #ProcessOne / #Matrix / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #TLSChannelBinding / #RFC9266 / #SASL2) https://www.ejabberd.im/

#libstrophe 0.14.0 has been released (#XMPP / #Jabber / #Strophe / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #SCRAMSHAPLUS / #SCRAMSHA1PLUS / #SCRAMSHA256PLUS / #SCRAMSHA512PLUS) https://strophe.im/libstrophe/

#QXmpp 1.10.3 has been released (#XMPP / #Jabber / #CPP / #CPlusPlus / #E2E / #E2EE / #EndToEndEncryption / #E2EEncryption / #XEP0384 / #OMEMO / #SCRAM / #SCRAMSASL) https://github.com/qxmpp-project/qxmpp

#GoXMPP 0.2.12 has been released (#XMPP / #Jabber / #Go / #GoLang / #SCRAM / #SCRAMSHA / #SCRAMSHA1 / #SCRAMSHA256 / #SCRAMSHA512 / #TLSChannelBinding / #RFC9266) https://github.com/xmppo/go-xmpp