The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

2
votes
0answers
24 views

Multiple browser instances through differents openvpn [migrated]

How can I config multiple instances of browser to connect through different VPN servers? I'm working in a Linux server and I need that every browser instance uses different VPN servers. Thanks in ...
1
vote
1answer
38 views

Does a TLS-connection to a proxy-server encrypt the destination url's?

If I use a browser through a proxy-server over a secure connection (i.e. the proxy is HTTPS) - does that mean that everything is encrypted, or just the page returned from the site? And who does the ...
2
votes
1answer
59 views

SSL Decryption why is the root CA certificate required on clients?

Maybe a quick question. We have Palo Alto's that perform SSL Decryption using a sub CA certificate issued by our internal Root CA. This is working for our internal windows domain computers as the root ...
3
votes
2answers
150 views

How does my browser detect my location, even via proxy?

How does my browser detect my location even via proxy? I have tried this code via VPN and got the same result as without it. According to the specification my browser should detect it from: ...
2
votes
1answer
63 views

Safety of exposing an internal web application to the internet using a reverse proxy in the DMZ

I am creating a web application which needs to make direct connections to internal resources (e.g. database servers), but will also need to be accessed from the internet. The web app exposes web ...
0
votes
1answer
32 views

configuring burp to use in proxy environment

my university internet connection runs behind proxy.its host name is 192.168.1.103 and port no is 3128.how to configure proxy in burp suite if i should enter above proxy setting in my firefox browser. ...
1
vote
0answers
38 views

Logging all traffic crossing SSH proxy

Is there a way to log SSH sessions proxied through a machine (User-> SSH Proxy -> Server (with SSH)) without modifying the SSH daemon on the proxy? I need to log all the commands as well as responses ...
0
votes
0answers
31 views

Can Web Proxy Autodiscovery leak HTTPS URLs?

The WPAD protocol can in some circumstances allow an attacker to get clients to use a malicious PAC script. It appears to be well documented, that this can be used to perform MITM-attacks on HTTP ...
4
votes
2answers
81 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
0
votes
1answer
34 views

In What Ways Can X-Foward-For Header Information Be Used In An Attack

By enabling X-Foward-For on our proxy, we would essentially be advertising our internal IP addresses externally. However, we use a private range. Everything goes through NAT. So, the best anyone would ...
1
vote
1answer
52 views

How to fully mask my computer without using tor? [closed]

I want to mask myself and therefore I configured a proxy server. I use debian and squid 2.7. It actually works fine, however, I visited the site whatismyip.com and I can still see that I'm accessing ...
0
votes
0answers
25 views

On firefox behind corporate proxy, intercepting on WebGoat using burp Suite error [migrated]

i'm following a tutorial on hacking web application WebGoat using burp suite I've downloaded webGoat which now runs on port 8080, set up burp suit and the browser connection as in the pictures, but ...
1
vote
1answer
110 views

Has anyone used this ICLOAK USB device? [closed]

Does anyone know about this ICLOAK USB device? Opinions or how well they work? I'm looking for a security solution when I'm using PCs where I work. Occasionally we have to log into to web sites, ...
2
votes
1answer
38 views

ettercap use as local proxy [closed]

Hi everibody and sorry for my english, I'm looking for a way to use ettercap (or another program) to alter TCP traffic (coming from local) on the fly. I used "netsed" with iptables, but netsed is too ...
1
vote
1answer
48 views

SSL Test Server with typicals Flaws [closed]

i am testing different SSL-Proxys and want to know more about their failure-handling. Do you know about an public (test)server (HTTPS) which provides the typical flaws like: Expired certificate ...
-2
votes
1answer
66 views

Official proof (document) that Linux is safer and faster than Windows [closed]

I work for the Mexican government, and even though everyone involved in Linux knows that it is safer and runs faster in most instances, I have not found an official document or authority that I can ...
0
votes
1answer
49 views

Decrypting SSL within Multiple Products

I've read the various questions tagged [ssl] and [mitm] and [proxy] and I couldn't find a duplicate. I cannot find any documentation on this subject online. All of the traffic is currently flowing ...
0
votes
1answer
44 views

Splitting data between wifi networks for security

Does there exist, software or technology, that can use more than one wifi network, in such a way that only part of the data travels through each 'side'? You would probably need an end address like a ...
0
votes
1answer
79 views

How does a reverse proxy change the security posture of a web server residing in the DMZ? [closed]

How does the reverse proxy change internal and external security posture with a reverse proxy compared to not having a reverse proxy? For example, you have a publicly accessible iis server, what is ...
3
votes
2answers
71 views

proxy servers and restricted work computers

I have a work-issued computer that I have limited access to the Internet due to the security protocols in place on the device. I want to use this machine at home, for work. I want to be able to hide ...
1
vote
0answers
100 views

VPN Server + Anonymity + Adblock for mobile Devices

In order to improve private security and anonymity while browsing the web on my mobile devices I wanted to tunnel all traffic to my own server via VPN and use a proxy software to filter unwanted ...
1
vote
1answer
157 views

End-to-end encryption with a reverse proxy and an application server

Lets say that I have an nginx reverse proxy that proxies the traffic to a Tomcat on the same server. I think the most common way to configure this setup is to enable SSL on nginx and then proxy the ...
1
vote
2answers
99 views

Using free subdomains to circumvent web filtering systems

(I was told that this was the place to ask this by someone from Webmasters, if I've got it wrong again please give me a chance!) I'm running a personal proxy service for the use of myself and some of ...
0
votes
1answer
87 views

Sniffing external networks from a public network (place)

There is something that I can not understand. If you are preparing, building up an attack from a public place (coffee shop, restaurant ect.). How can you be tracked by law enforcement? I'm asking ...
2
votes
0answers
84 views

Rogue WPAD server attack

Today I encountered something I have certainly not seen before first hand. Our IDS blocked some outbound traffic attempts from 5 servers with no WAN access. This traffic was leading to an inactive ...
53
votes
4answers
3k views

What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)

There has been quite a bit of concern noted relating to the recent discovery that Lenovo are pre-installing a piece of Adware (Superfish) which has the capability of intercepting SSL traffic from ...
1
vote
0answers
36 views

Proxpy- certificate issue

I am using proxpy, a proxy server written in Python. It comes with its certificates and after installing one of the certificates in Firefox, I got 'Connection is untrusted'. Any help in this regard ...
1
vote
2answers
156 views

How to force clients to browse Internet through Squid Proxy

I am using Windows Server 2012 in which I have shared internet through NAT to a secondary LAN card using routing and remote service. The problem is that when my clients are browsing through proxy ...
2
votes
1answer
363 views

Intercepting HTTPS Android app traffic

I'm trying to intercept Android application traffic from my Android phone....Basically what worked before was that i had simply installed fiddler proxy on my PC, exported the root certificate (and ...
1
vote
3answers
65 views

Secure tunnel set up in an office environment

Suppose I am a rogue employee and I want to syphon some sensitive data out of the office and I only have office internet access for this. My office internet access needs to go through a proxy server, ...
2
votes
0answers
90 views

Securing elasticsearch behind a reverse proxy

I intend to run an Elasticsearch index to store a persistent copy of data retrieved from an external service. My plan is to host the Elasticsearch index on AWS, and have it listen on 127.0.0.1 only. I ...
1
vote
3answers
510 views

How to intercept and analyze mobile SSL application traffic?

What is the best way to analyze requests sent by a mobile application over SSL? The communication protocol is not necessarily HTTP/S so intercepting them with BURP/ZAP/Fiddler or any other HTTP proxy ...
2
votes
2answers
91 views

Security of HTTP proxies

If POST requests are being made to a website via a browser using an HTTP proxy from sslproxies.org, is it possible to trace the origin of those AJAX requests without having access to the proxy being ...
2
votes
1answer
165 views

How can I intercept XMPP traffic on Android?

I have been learning about security testing on Android apps, and to intercept traffic I was using Burp Suite. I know it works perfectly for HTTP/HTTPS traffic, but most of the messenger apps are using ...
1
vote
0answers
70 views

HTTP GET Request to a webpage that does not exist [closed]

I am seeing a machine is making a HTTP GET request to webpage (ex: www.sample.com/1.png), proxy devices respond with status code 407 (proxy auth required). But when I checked for the site via ...
-2
votes
1answer
120 views

Proxies, and how they can be traced

When you make an connection with a proxy and you do something shifty to a server, the people working the server could just call up all ISP's and then your ISP sees the last connection you made was to ...
2
votes
1answer
160 views

Can a corporate proxy downgrade an SSL handshake?

At work, I'm behind an NTLM Proxy. When the SSL Poodle flaw came out, I hardened the configuration of my private server, and found out that even if the client and server shared common ciphers, some ...
-1
votes
1answer
480 views

Interpreting anti-hacker-alliance analysis [closed]

One of security tools available for web browsing is (http://anti-hacker-alliance.com) Please find below two readings: a) Reading for IP 205.x.x.x that state among other-things "you are using proxy ...
1
vote
1answer
223 views

How can I convert a Windows certificate into a PEM format, that includes the chain + root?

I need to import a certificate into a Cisco Ironport for Web SSL inspection. The only input format supported is PEM. Based on my research the PEM format does support all certificates in the chain, ...
3
votes
2answers
73 views

Would a VPN with changing configs do the same job as different VMs

I was reading this question. So my question: Would using a VPN and swapping out configuration files that change your IP address mask the same as using different VMs?
2
votes
1answer
109 views

Standard for Determining the Anonymity Level of a Proxy

Is there a standard for determining the anonymity level of a proxy? After reading various articles, I have come to the conclusion that you determine the anonymity level by analyzing the headers but I ...
0
votes
1answer
140 views

Iphone app not allowing proxy

Hi everyone I am interested in how a banking app works, especially the way it handles https requests. So I installed one, set my proxy settings, started burp suite and expected it to work. As you may ...
0
votes
1answer
124 views

MITM faking certificates

I am looking at the theory behind MITM attacks in order to see some unencrypted packets from the 3DS. From research here is what I understand so far: 3DS > Proxy > Nintendo server I am going to try ...
1
vote
1answer
72 views

VPN Tunnel Routing Question

I'm a little confused about how VPNs work ... I read that they provide an end-to-end encrypted tunnel between you and whoever you're trying to connect to but is that actually the case? VPNs let you ...
1
vote
2answers
91 views

MITM on program with no proxy settings

I'm trying to inspect the traffic of a program (which is running on my computer) that uses SSL over TCP to a non-standard port. The traffic may or may not be HTTP traffic, likely isn't. Neither ...
0
votes
1answer
220 views

iptables intercept received packet with proxy and then forward to destination

Lets say I receive internet through my eth1 port and share it via hotspot to other devices (wlan0 port) [internet]----(eth1)[my computer](wlan0 hotspot) | ...
1
vote
1answer
1k views

Can wifi network administrators see through proxy servers?

I've looked at a lot of VPNs, and "what's my ip address" sites confirm that outsiders can't tell where I really am when I'm using them, but I haven't been able to get my own WiFi yet, so I don't know ...
1
vote
2answers
972 views

Intercepting SSL traffic on Android app

I am trying to intercept SSL traffic from my Android app to test the security. I am using certificate pinning in the hopes I can prevent people from snooping. I have tested by configuring ProxyDroid ...
1
vote
2answers
71 views

making online transactions over proxy

So I went over quite a lot of topics here and on the internet.. but I still can't seem to completely understand this issue. How secure really are services like proxies, VPN or VPS? VPN is promoted ...
2
votes
2answers
202 views

Decrypting TLS Traffic

Context: I want to reverse engineer a protocol in place for the Nintendo 3DS. The implementation however, uses TLS, which makes it difficult to reverse engineer. I'm currently able to sniff packets ...