HTTP HTTP GET HTTP proxy HTTP proxy auth # Server-side # this is returned first since we get no proxy-auth HTTP/1.1 407 Authorization Required to proxy me my dear Proxy-Authenticate: Digest realm="weirdorealm", nonce="12345" Content-Length: 33 And you should ignore this data. # Client-side http # tool is what to use instead of 'curl' lib%TESTNUMBER proxy HTTP proxy with auth, change proxy, clear auth %HOSTIP %HTTPPORT # Verify data after the test has been "shot" GET http://example.com/ HTTP/1.1 Host: example.com Proxy-Authorization: Basic %b64[victim:secret]b64% Accept: */* Proxy-Connection: Keep-Alive GET http://example.com/ HTTP/1.1 Host: example.com Accept: */* Proxy-Connection: Keep-Alive