authtokens

authtokens is a Selenium-based tool, written in Python, for detecting authentication tokens.

---

What It Does

1. Authenticates into given url(s);
2. Collects cookies;
3. Computes authentication token(s);

Usage Example

python detect_tokens.py -i http://example.com -u username -m mail@foo.com -n nickname

Requirements

• Firefox
• PhantomJS (recommended v. 1.9.8)

Dependencies

• selenium (>= 2.44)
• beautifulsoup4 (>= 4.3.2)

License

authtokens is licensed under the MIT License.

References

1. Calzavara, Stefano, et al. "Quite a mess in my cookie jar!: leveraging machine learning to protect web authentication." Proceedings of the 23rd international conference on World wide web. International World Wide Web Conferences Steering Committee, 2014.