[Pentesting] HTTP auth, part I: basic