Did you find evidence that SOCKS uses a different reply message for different login types? When I was reading I thought that the same login reply message structure was used in response to any login type.
.Seth
The definition of SOCKS5 in RFC 1928 doesn’t seem to say anything about what different authentication methods should do. So RFC 1929 for username/password has a reply w/ [version octet, status octet] and RFC 1961 for GSSAPI has [version octet, message type octet, length octet, variable length opaque token].
Current parser won’t do well with GSSAPI negotiation, but not sure how useful it would be since it’s likely all further SOCKS requests/replies are going to be framed differently (e.g. encrypted).
- Jon
Ah, ok. I didn’t follow the RFC down far enough apparently. Thanks.
It looks good to me.
.Seth