HackerHunter can protect any existing folder (except cgi-bin folders) on apache server with any kind of files inside (images, plain HTML pages or scripts). It use nonstandard variation of Basic HTTP Authorization, keep strongly hashed passwords in database, send poorly encoded real passwords across network only once and have build-in self-repair and protection procedures.Main features:
- Easy install.
- Use only standard server (Apache) modules.
- System disallow several users with same password access to protected area at once.
- Paranoid session and IP tracing (it is possible to enter username and password only using browser).
- System send real password across network only once and encoded using hard and complex hashing with md5. Post data different for each login attempt even for same user and contain 3 different md5 hashed results of concatenation of real password with 2 long random strings.
- Bruteforce protection for login and register pages with ability to ban bruteforcers.
- User can change his own password in minutes.
- Build-in "stolen password" protection mechanism. System reset passwords used by several people at once, generate new password and send it to real user's e-mail without human administrator interference.
- Administrator panel for manual view/search/change/add/export/import users, manage registration pins, view used pins or remote calls logs, backup and restore database.
- Complete rewriting of server access files after each successful login.
- Easy integration with most part of billing or payment systems.
Find us on Google+
