This is an advanced question for networking/proxy WIZARDS.

btemtd

Newbie
Joined
Apr 10, 2013
Messages
2
Reaction score
0
Hi Guys,

I am now working for a company that has implemented a function in there machines (Printer/copier MFDs) . The function is explained in the next paragraph.

Basically many companies hire these machines and what we have implemented is an automated billing meter that is required to talk out of the clients network and back to our billing team, in some cases the clients use a proxy server. There is a problem when I am talking to the customers trying to gather the network details so that our technician will be able to go onsite and enable this feature on the machine.

If someone on here can solve this problem I am about to mention They are GENIUS.. because I have talked to people that really know what they are doing and so far I have got an answer.

Here is the problem, when I talk to the IT guys sometimes or actually 40% of the time they are not the guy who actually set up the network and it can be a real pain to retrieve information even if they have full admin rights on there network. I need to know what Proxy authentication scheme the customer is using whether it be basic, NTLM, digest etc.. Is there any free detection tools I can use or maybe there is a way I can guide them to the place in windows where they can get this information for me? I was just thinking is there something in the registry that tells me this information? Please if anyone has the answer they true champions and I really will appreciate it.

Regards

AR
 
Assuming IE is being used.
Tools->Internet Options->Connections->LAN Settings button
This will display the Local Area Network (LAN) settings.
There is a proxy server section at the bottom.
This is where proxy settings would be set if used for internet access.

Of course there is a possibility that there is a proxy server running in transperant mode, in which case the network admin who set it up would have to get involved. In transparent mode, the user's workstation would not even see it.

There as some tests online that will allow you to see if you are proxied.
Just google it.
 
Ok I dont think you read the question correctly..... This is beyond getting the proxy server address. I am talking about gaining information about what type of PROXY AUTHENTICATION SCHEME....... Example : Basic, NTLM, Kerberos, Digest Etc..............

Now do you understand my question.....
 
Ok I dont think you read the question correctly..... This is beyond getting the proxy server address. I am talking about gaining information about what type of PROXY AUTHENTICATION SCHEME....... Example : Basic, NTLM, Kerberos, Digest Etc..............

Now do you understand my question.....

To be honest with you i really don't understand what you're talking about either. What is a proxy "authentication scheme" You'd find more geniuses if you'd be a genius yourself and stop assuming everybody has an A+ at reading big words.
 
To be honest with you i really don't understand what you're talking about either. What is a proxy "authentication scheme" You'd find more geniuses if you'd be a genius yourself and stop assuming everybody has an A+ at reading big words.

If you don't understand what he's talking about - don't post. He's asking a completely reasonable question using completely the correct language. If you don't understand what he's saying, that's your shortcoming, not his.

@ btemtd:
Each browser will store the authentication details somewhere (you're correct, probably the registry, although I know FireFox has a strange file caching system for things like this, or did the last time I checked), that should work for basic authentication fine, as for NTLM, you could always just try using the current user credentials and checking for an HTTP 407. I'm not so familiar with Kerberos/Digest, but when it comes down to it if a proxy is required for accessing the network then those proxy details will be stored on a computer in the network, provided it's used.

I'd advise trying to pull the credentials (or at very least, the authentication type) directly from the installed browsers. You'll probably have to code this yourself, but it shouldn't be too complex.
 
I would have thought for business this information would be managed on the router for the whole business network rarher than individual pc's, at least thats how I would share a proxy across a business network. In which case you want access to the router admin panel.

Sent from my GT-N7100 using Tapatalk 2
 
... you could always just try using the current user credentials and checking for an HTTP 407. I'd advise trying to pull the credentials (or at very least, the authentication type) directly from the installed browsers.

Just what he said. If you can't get the authentication method in use from the clients directly then get it from the proxy.
The 407 status code mentioned above will already contain the auth type required.

method1.png

Just connect to the proxy with any tcp client like telnet or netcat whatever and type "GET http:/blah HTTP/1.0"
The proxy should respond with the 407 like in the pic above. Red circle shows that the auth method is "basic" in this case.

Is there any free detection tools I can use

You'll probably have to code this yourself, but it shouldn't be too complex.

Yes it's a simple thing. Here you go - your very own totally awesome "detection tool" (win32):
(just displays the headers from the proxy, so you have the method required)

Code:
http://www.mediafire.com/?hiaig9gum32dmkb

Code:
https://www.virustotal.com/en/file/ced94c938598e5f5d18210127e16dab66128306284964187de914fecd633416d/analysis/1365680857/

getproxyinfo.png

Note: quick and dirty without any error checking so yes it will crash on any error, but still does the job.

Hope this helps :)
 
Last edited:
If you don't understand what he's talking about - don't post. He's asking a completely reasonable question using completely the correct language. If you don't understand what he's saying, that's your shortcoming, not his.

The point was people get better results when they speak more simply = your shortcoming.
 
Back
Top