The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

0
votes
0answers
12 views

Ethical way to get past a proxy server? [migrated]

I am working with lwIP on an embedded device that wants to connect via DHCP to a flexible LAN. Sometimes the device will want to connect to a network with a proxy server. How to I make the DORA ...
1
vote
3answers
114 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
-1
votes
2answers
46 views

Is it possible to perform bruteforce attack with proxy on a website?

When one does brute force attack online, most probably the person will get caught easily,isn't there a way of doing brute force for example on a website without getting caught?
0
votes
1answer
29 views

How cloud based web proxy works (ex:Zscaler)?

1) How zscaler see the clients traffic from cloud and how it filters malicious traffic? 2) How zscaler protects the web applications from external threats?
1
vote
1answer
63 views

Some specific website not loading when proxy through Burp

I am conducting web application pentest in which all the traffic will go through BurpSuite. In addition, SOCKS proxy is used so all the requests are sending out from a fix company IP address. ...
3
votes
1answer
65 views

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

At the simplest form - the question is to block external proxy due to an emergency situation due to which management have forced technical teams to get a solution to block all the external proxy or ...
3
votes
2answers
38 views

Application level proxy on HTML. Capabilities

I am studying for a network security exam. I found in an old exam the following question and I have no idea of the answer: A company is protecting its intranet by a multi-homed bastion host B, ...
8
votes
2answers
808 views

Are future TLS versions going to prevent traffic inspection?

Nowadays it is possible to inspect (unencrypt) TLS (HTTPS) traffic inside an organization. The mechanism consists in using a root CA that is configured in the web client and a network device that ...
4
votes
1answer
76 views

How to defend against a Spoofed-IP Blacklist DOS attack?

So I've implemented an IP Blacklist for the /login endpoint on my server. If any IP fails to login more than x number of attempts in x number of minutes the requesting IP is blacklisted for x number ...
2
votes
0answers
65 views

Unable to access “encrypted.google.com” with “proxy.googlezip.net”

I use Google data compression proxy with Firefox (Abrowser 38). Most websites are loaded without any problem but unable to access encrypted.google.com So, is this is normal? i.e I've to use system ...
0
votes
1answer
42 views

What's the best practice for MitM'ing https traffic to distinguish self-signed certs?

My organisation is concerned about viruses and attacks coming into our network. Since http traffic has been declared persona non grata by some browser makers and other parties, it becomes ...
10
votes
3answers
236 views

Why don't despotic countries simply block all encrypted traffic?

This is a question I often think of when I hear about countries considering blocking just one protocol with encryption, such as tor: How would a resourceful government block tor. Clearly France ...
3
votes
3answers
176 views

Can one Bypass a Web Proxy by using the Host File?

a website aaa.com has a Static Public IP address x.x.x.x . Client B resides in a network and it accesses the internet through a web proxy C. How the web requests are routed from B to the proxy is ...
1
vote
0answers
75 views

bypass proxy metasploit

I am working on a student project with the goal to exploit navigator vulnerabilities on weak Windows XP SP2 and/or Linux computers using only Metasploit Browser Autopwn 1 & 2. Seems trivial but ...
0
votes
3answers
102 views

How can I pretend to be accessing from another country and still do not flag up as possible fraud? [closed]

I live outside the UK and because of my work I make a lot of purchases on UK websites using my UK billing addresses. One problem I have is that sometimes if the billing country is different from the ...
0
votes
1answer
77 views

Strange browsing problem, unknown images

When I open any site, I sometimes see unknown images replacing the original images on the website. They are not ads and can't be clicked. Just random images of people, cartoons etc. When I refresh ...
0
votes
2answers
61 views

Why does malware modify proxy settings?

During dynamic analysis, I have noticed that Adware and some Trojans modify the proxy settings within the Windows Registry. What is the purpose behind making this modification? The most common keys I ...
3
votes
1answer
36 views

Connection not secure when using a proxy

I connect to the Internet using a proxy at my university residence and I noticed at some sites (like my bank and PayPal), the browser reports that: it's unable to check if the website certificate ...
3
votes
1answer
143 views

How do Cloud Encryption Gateways and CASB work?

Cloud Encryption Gateways (CEG) and Cloud Access Security Brokers(CASB) are becoming popular to ensure the security and confidentiality of the data leaving to Cloud Service Providers. How do they ...
2
votes
1answer
50 views

Fixing DNS leak - transparent proxy

My ISP is using a transparent proxy to intercept my DNS lookup requests when using VPN. Is there a way to prevent that? I am using Lubuntu if that makes any differance.
4
votes
2answers
99 views

Why is it dangerous to socksify a whole system?

Today, I configured my browser to use a ssh/SOCKS5 proxy setup to keep my web traffic confidential even when browsing from insecure networks (e.g. a public WLAN hotspot). I was then thinking that it ...
3
votes
2answers
72 views

Reverse Proxy or direct?

imagine I have an architecture as shown. In order to get to the internal web server, should I use a reverse proxy like as shown and redirect traffic to my web server? Is this a more secure way ...
3
votes
2answers
54 views

Reverse proxy or Public load balancer?

What would be the difference between putting in a load balancer or reverse proxy on the perimeter to send requests back to a system in our LAN? We don't want to have people NAT directly into the LAN, ...
2
votes
1answer
93 views

Proxied server requests + forwarding authentication info in a secure fashion

We are using PassportJS with a couple of Node.js servers - Passport is just a library that is popular for Node.js server authentication - but we have some questions about how to use Passport with ...
4
votes
1answer
439 views

Is it possible to log web sites that require Adobe Flash?

We would like to block the use of Flash on our internal network, but believe that several business-critical sites may still rely on that app. I'd love to be able to "watch" the traffic for several ...
1
vote
2answers
515 views

How can I see the websites visited by clients of my WLAN?

How can I view the websites that are visited by the user of my wifi? What tools are required to do this? And one more question: can I see the WhatsApp communications?
0
votes
0answers
35 views

What are the defenses against SSL Interception? [duplicate]

SSL/TLS Proxies allow traffic interception by doing a MITM. Are there any active defenses against this to protect privacy of the users ?
0
votes
1answer
71 views

Does IP Spoofing mean using a proxy?

As said in question, does ip spoofing mean that someone uses a proxy, thereby he/she appears as different ip in the internet world?
0
votes
0answers
19 views

How to configure proxy settings of cellular internet for burp

I am pen testing an android app and using tethering to connect my phone to my laptop. I configured the access point settings as proxy = ipv4 address of my laptop and port = port on which burp is ...
3
votes
1answer
113 views

How to forward HTTP/SOCKS proxy on same port to SOCKS server?

I have socks server (TOR) and can "convert" it into HTTP/HTTPS one via Polipo or something like this. But I want to use it transparently as HTTP or SOCKS on the same port. I have experience with ...
2
votes
2answers
51 views

About browsers injectors (Sonic Train)

I know that viruses use some ways to inject some ADs in the browsers web pages like : 1-Inject an extension 2-Inject some codes to the browser process 3-With a proxy server 4-Install an injected ...
0
votes
1answer
99 views

My ISP using a transparent proxy

I found that my internet service provider uses a transparent proxy on some sites and apps like Google, Whatsapp, etc. I know they use it to save bandwidth but my question here is if they are able to ...
1
vote
1answer
78 views

Using dnscrypt on a public hotspot with a captive portal

What strategy shall I take if I wanted to use a dnscrypt with a public hotspot that requires login through a captive portal? Such hotspots require DNS settings to point to their servers (via DHCP) so ...
2
votes
1answer
99 views

How does an entity on a network (e.g. sysadmin, security software) identify that a user is connecting to the internet with a proxy?

For example, the security software iBoss is able to detect if you are using a proxy. Proxy Circumvention Proxy attempts to circumvent your Internet security solution not only violate your ...
0
votes
1answer
63 views

How to configure WebScarab to intercept only POST requests?

I'm trying to make WebScarab intercept only POST requests. On the Intercept tab below Methods I've selected only POST, but it still intercepts all GET and POST requests, so it's quite hard to tamper ...
2
votes
1answer
79 views

How can an attacker redirect victims through proxy

Let's say that an attacker is behind a proxy that's using NAT or PAT. Is it possible for him to redirect victims to his machine to achieve some attacks like web phishing or opening reverse TCP ...
6
votes
1answer
918 views

How does a website detect proxy? [duplicate]

How can a specific website detect that I'm surfing via proxy? Is there a way to use proxy and not get detected? If so, how?
3
votes
1answer
66 views

Reverse-proxy not a solution to DDOS attacks when hosted on PaaS?

We run our apps on Heroku and use Cloudflare as a CDN and to protect against DOS attacks. However, we recently experienced (a relatively minor) attack that managed to easily bypass Cloudflare by ...
2
votes
2answers
95 views

Using separate HAProxy and API tiers, how can I ensure a request came from HAProxy?

I have two machines and a HAProxy machine doing SSL termination and accepting client certs successfully. How can I configure HAProxy to ensure that the messages coming into the API box are from ...
0
votes
2answers
123 views

Data exposed through campus proxy

I want to connect with Firefox to my university campus proxy, in order to access subscribed research journals, but first I need to know, which of the transmitted data through the network are visible ...
3
votes
1answer
353 views

Why use a proxy to hide OAuth client credentials in password grant calls?

In a November 2014 article by Alex Bilbie, OAuth users were advised against making the client send its credentials (client_id and client_secret) when performing Resource Owner Password grant calls. ...
3
votes
1answer
65 views

Is intercepted ssh-socks traffic revealing HTTP object count and sizes?

I read an article titled the network is hostile, in which the following is stated: Traffic analysis remains a particular problem: even knowing the size of the files requested by a TLS-protected ...
0
votes
5answers
2k views

How to send HTTPrequest anonymously [closed]

I want to send a HTTPrequest to a specific web address, but with different IP address. For example, if a webserver detect IP address, then add it to a database. If another request come from a IP, ...
1
vote
1answer
1k views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to ...
4
votes
1answer
94 views

What kind of attacks can target static resources?

Static resources and their caching interests me from the security perspective. Let's say we have an .jpg file requisted from the origin -> going through a reverse proxy with caching -> reaching the ...
4
votes
1answer
256 views

Is it possible to trace a backend through a reverse proxy?

I'm creating a reference network topology for a WebSocket chat application at work, and I'd like to have something clarified for my own understanding. The current topology involves a reverse proxy ...
2
votes
3answers
371 views

How secure is socks5 proxy over ssh?

At work we are all using Windows 7+, with full administrative privileges. Each PC has a dedicated IP and a proxy is used. It is set as a HTTP proxy and the option to use this for all types of ...
4
votes
1answer
117 views

How should certificates be shared between a proxy and a frontend?

At work, I've been asked to look into creating a reference topology for a WebSocket chat application, which includes a proxy between the web-facing frontend server and the backend. At the moment, I am ...
2
votes
4answers
166 views

SSL encryption process and its security

I know the basics of SSL encryption and how certificates work, but there are some points that are not clear to me regarding the SSL security: If there is a intercepting proxy between the web server ...
1
vote
1answer
80 views

Reverse Proxy SSL container

Technically and security wise, can a reverse proxy act as a "container" for SSL certs ? Meaning, for example currently my web server is running on ssl (https). Can I move the SSL cert to the reverse ...