When recording a web session that uses NTLM authentication, your server may require you to enter details such as a user name and password.
Generating a web_set_user function
When performing NTLM authentication, VuGen adds a web_set_user function to the script.
If authentication succeeds, VuGen generates a web_set_user function with your user name, masked password, and host.
If you cancel the Web Recorder NTLM Authentication dialog box without entering information, VuGen generates a web_set_user function for you to edit manually.
web_set_user("domain1\\dashwood, "Enter NTLM Password Here", "sussex:8080");
If you enter a password manually, it appears in the script as-is, presenting a security issue.
To mask a password:
Right-click the password and select Mask String. VuGen masks the string and generates an lr_unmask function, used to decode the password during replay. For more information about masking strings, see Encode passwords and text.