HTTP Digest Authentication Test

How to use HTTP Digest Authentication Test

Reproduce a supported qop=auth MD5 or SHA256 response from explicit test fields. The calculator hashes username:realm:password and method:uri, then combines their digests with nonce, nonce count and client nonce. It returns intermediate test values plus an inert Authorization draft.

1. Provide test username, realm, test password, nonce, request target, method, client nonce, nonce count (8 hex digits).
2. Choose the supported mode and run the tool. Review its assumptions and any reported errors.
3. Copy the result or download a separate output; reset to clear the current form.

Good to know

• qop=auth with MD5 or SHA256 and UTF8 credential spelling only. No auth-int, sess, userhash or automatic challenge negotiation.
• Use test credentials. HA1 is password-equivalent material; it appears in the report and any copied/downloaded output. No login request is sent.
• Inputs are processed on this device and are not automatically saved or uploaded.