Analyzing and Fixing a Basic-Authentication Phishing Vulnerability in Discuz! 3.2
Analysis. Before examining the vulnerability, review the background. 401 phishing, also called basic-authentication phishing, relies on the fact that most web servers allow anonymous access. Users normally retrieve public website content without entering authentication credentials. Nginx and Apache…