fix HTTP WWW-Authenticate header parsing

autodiscover/autodiscover.go

@@ -355,10 +355,6 @@ func autodiscover(domain string, mapi bool) (*utils.AutodiscoverResp, string, er
 
 	defer resp.Body.Close()
 
-	if resp.StatusCode == 401 || resp.StatusCode == 403 {
-		return nil, autodiscoverURL, fmt.Errorf("Access denied. Check your credentials")
-	}
-
 	body, err := ioutil.ReadAll(resp.Body)
 	if err != nil {
 		return nil, "", err
@@ -405,6 +401,42 @@ func autodiscover(domain string, mapi bool) (*utils.AutodiscoverResp, string, er
 			SessionConfig.Email = secondaryEmail
 			return autodiscover(domain, mapi)
 		}
+
+		if resp.StatusCode == 401 || resp.StatusCode == 403 {
+			var authMethods []string
+			var currentAuthMethod string
+			var found = false
+
+			if SessionConfig.Basic == true {
+				currentAuthMethod = "Basic"
+			} else {
+				currentAuthMethod = "NTLM"
+			}
+
+			for _, header := range resp.Header[http.CanonicalHeaderKey("WWW-Authenticate")] {
+				authMethods = append(authMethods, header)
+
+				if strings.HasPrefix(header, currentAuthMethod) {
+					found = true
+				}
+			}
+
+			if !found {
+				if SessionConfig.Verbose == true {
+					utils.Trace.Printf("Available authentication scheme(s): %s", strings.Join(authMethods, ", "))
+				}
+
+				err := "It looks like that this authentication scheme is not supported"
+				if SessionConfig.Basic == true {
+					err += ". Try to remove --basic option or specify --rpc option"
+				}
+
+				return nil, "", fmt.Errorf(err)
+			}
+
+			return nil, autodiscoverURL, fmt.Errorf("Access denied. Check your credentials")
+		}
+
 		if m, _ := regexp.Match("http[s]?://", []byte(domain)); m == true {
 			return nil, "", fmt.Errorf("Failed to authenticate: StatusCode [%d]\n", resp.StatusCode)
 		}

http-ntlm/ntlmtransport.go

@@ -93,9 +93,13 @@ func (t NtlmTransport) RoundTrip(req *http.Request) (res *http.Response, err err
 			return nil, err
 		}
 
-		// retrieve Www-Authenticate header from response
-
-		ntlmChallengeHeader := resp.Header.Get("WWW-Authenticate")
+		// retrieve WWW-Authenticate header from response
+		ntlmChallengeHeader := ""
+		for _, header := range resp.Header[http.CanonicalHeaderKey("WWW-Authenticate")] {
+			if strings.HasPrefix(header, "NTLM") {
+				ntlmChallengeHeader = header
+			}
+		}
 		if ntlmChallengeHeader == "" {
 			return nil, errors.New("Wrong WWW-Authenticate header")
 		}

mapi/mapi.go

@@ -10,6 +10,7 @@ import (
 	"net/url"
 	"regexp"
 	"runtime"
+	"strings"
 	"time"
 
 	"github.com/sensepost/ruler/http-ntlm"
@@ -191,17 +192,52 @@ func mapiRequestHTTP(URL, mapiType string, body []byte) ([]byte, error) {
 			return nil, err //&TransportError{err}
 		}
 	}
+
+	defer resp.Body.Close()
+
 	if resp == nil {
 		return nil, &TransportError{fmt.Errorf("Empty HTTP Response")}
 	}
+
+	if resp.StatusCode == 401 || resp.StatusCode == 403 {
+		var authMethods []string
+		var currentAuthMethod string
+		var found = false
+
+		if AuthSession.Basic == true {
+			currentAuthMethod = "Basic"
+		} else {
+			currentAuthMethod = "NTLM"
+		}
+
+		for _, header := range resp.Header[http.CanonicalHeaderKey("WWW-Authenticate")] {
+			authMethods = append(authMethods, header)
+
+			if strings.HasPrefix(header, currentAuthMethod) {
+				found = true
+			}
+		}
+
+		if !found {
+			if AuthSession.Verbose == true {
+				utils.Trace.Printf("Available authentication scheme(s): %s", strings.Join(authMethods, ", "))
+			}
+
+			err := "It looks like that this authentication scheme is not supported"
+			if AuthSession.Basic == true {
+				err += ". Try to remove --basic option or specify --rpc option"
+			}
+
+			return nil, fmt.Errorf(err)
+		}
+	}
+
 	rbody, err := ioutil.ReadAll(resp.Body)
 	if err != nil {
 		return nil, &TransportError{err}
 	}
 	responseBody, err := readResponse(resp.Header, rbody)
-	if resp != nil {
-		defer resp.Body.Close()
-	}
+
 	return responseBody, err
 }
 

rpc-http/rpctransport.go

@@ -101,9 +101,12 @@ func setupHTTP(rpctype string, URL string, ntlmAuth bool, full bool) (net.Conn,
 		ntlmChallengeHeader := ""
 		for _, v := range parts {
 			if n := strings.Split(v, ": "); len(n) > 0 {
-				if n[0] == "WWW-Authenticate" {
-					ntlmChallengeHeader = n[1]
-					break
+				//sometimes header name may be WWW or Www
+				if strings.ToLower(n[0]) == strings.ToLower("WWW-Authenticate") {
+					if strings.HasPrefix(n[1], "NTLM") {
+						ntlmChallengeHeader = n[1]
+						break
+					}
 				}
 			}
 		}