The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

-1
votes
1answer
53 views

Man-in-the-middle attack with public wifi

I'm using Charles to sniff out the traffic on my iPhone at Starbucks and for some reason it won't work with at&t wifi. Google Starbucks wifi does, however. I use my iPhone to connect to the same ...
0
votes
0answers
14 views

How to configure Proxychains in backtrack? [migrated]

I am trying to configure proxychains.conf file but when i run any application from proxychains like firefox, it can't open the webpage and also terminal is showing "need more proxies !" ?? I have ...
1
vote
1answer
62 views

How to post comments on websites without being traced back

Just trying to get some general sense about the security on internet now-a-days. There are so many websites I go and comment on different things. If some comments are political and they don't like, I ...
0
votes
1answer
51 views

OWASP Zap proxy Fuzz XSS pentest against REST API

I am looking to PEN test my application against XSS attacks. The application is a REST API... As such when you POST some JSON to /cart/add to see the result of that attack you would need to GET ...
0
votes
0answers
22 views

Enable transparent proxy [migrated]

this is my first post here, so sorry if i made some mistake. I work in a company who has an http/https auth proxy, and they allow us to use our devices, as long as we setup the proxy. The problem is ...
-1
votes
0answers
23 views

Port forwarding does not work for http sites [migrated]

I am connecting to office network through VPN. I have two servers A and B. I have ssh tomcat access to A through VPN but not to B. When I ssh into A, from there I can ssh into B. Also, B is running ...
0
votes
0answers
48 views

How to config Squid SSL bump to let Paloalto PA series firewall recognize App-ID

A Paloalto firewall(PA-2050,POS 4.1x) was capable of recognizing the websites which users are visiting(thru http/https) then flag them with a App-ID and apply application control on the traffic, for ...
0
votes
1answer
41 views

MITM attack in a star network with proxy server

My community centre has a public computer center. I am pretty sure that it's connected in a star topology with some switch in the center. It also have a proxy server which we need to enter a username ...
5
votes
1answer
158 views

What Steps Does An Anonymous Artist Need To Take to Retain Anonymity? [closed]

I read these questions which had great information: How can I keep my identity anonymous as a website owner/administrator? and How much can I trust Tor?, however I wonder if this is too extreme for my ...
3
votes
2answers
106 views

How to get net anonymity while browsing?

I am a college student and am getting free wifi for using the 'Hostel campus" facility ', to access net, I have to put a proxy IP address to my browser. I have heard that they can see what all ...
-1
votes
0answers
77 views

exploiting HTTP HOST header based redirection in apache reverse proxy for intranet resource

I'm looking for suggestion on a POC which I'm doing. I'm trying to solve a use case where in a user accesses the intranet websites from some corporate mobile app when he is not on corporate network ...
0
votes
0answers
40 views

How do I detect a Socket Secure (SOCKS) proxy?

I've been trying to detect a Socket Secure (SOCKS) proxy server using PC fingerprint, but everything looks the same, regardless of the proxy's presence. Are there ways to block the sock access?
0
votes
1answer
128 views

Does an HTTPS proxy encrypt traffic between proxy client and server for HTTP requests?

To bypass censorship in a DIY fashion, I plan to set up private proxies for my personal use. One of the possible methods I would try is to use an HTTPS proxy (not a web proxy, to be explicit) hosted ...
1
vote
1answer
39 views

Protecting encryption of outdated software with a server

I have a 1st generation iPad, and I usually use it for web browsing when I'm home. The 1st gen iPad can't run newer versions of iOS (I'm stuck with iOS 5). I went to a website that tells if your SSL ...
1
vote
2answers
48 views

Security risk of Microsoft AD Certificate Services?

We have an internal CA server for our domain located at http://cert_srvr.local.domain/certsrv/certrqxt.asp. This server runs Microsoft Active Directory Certificate Services. When I went to the ...
0
votes
1answer
70 views

SSL decryption without installing a certificate on each client

Given a proxy performing MITM SSL decryption and inspection, is it possible to install a wildcard certificate (*.domain.com) on the proxy signed by a root CA (such as VeriSign or GoDaddy) such that ...
1
vote
1answer
101 views

Strange bug in ModSecurity with the rule 950901

I have a classic ModSecurity configuration (apt-get...) SecRuleEngine Off SecPcreMatchLimit 1000 SecPcreMatchLimitRecursion 1000 SecAction "phase:1,t:none,nolog,pass, \ ...
1
vote
1answer
91 views

What can entreprise admins do with our secured sessions?

The enterprise where I work has a proxy server that traces and filters our web activities. Employees claim that they can know the links that we visited and see the content of HTTP web sites, but they ...
1
vote
1answer
68 views

Why are certain languages chosen for security application development over others?

Specifically, why are the most popular attack proxies written in java? Is there any particular security posture to the design of the java language that makes writing tools like these simpler? Easier ...
2
votes
1answer
90 views

Reverse Proxy SSL

I am having trouble finding out if a potential server configuration is secure. I have a server running a nginx reverse proxy that is accessible from a public ip address on the ports 80 and 443. I then ...
0
votes
1answer
115 views

HTTPS encryption and internet proxy [closed]

I'm not sure if this is the right place to ask this question. Please tell me, and I'll delete it. I want to modify a Word document hosted on my OneDrive account. I see that it is using a SSL ...
0
votes
0answers
55 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat ...
1
vote
0answers
46 views

Reverse proxy which only proxies published query strings?

I'm setting up a reverse proxy to limit access to a protected resource. The protected resource provides a status page (http://protected.local/info). That page contains a number of links with query ...
0
votes
1answer
117 views

How to prove iOS app is vulnerable to MiTM

I'm updating an iOS app and I want to prove that it is vulnerable to MiTM attack. I have set up Charles Proxy on my mac and configured the Simulator so that it trusts Charles CA Certificate, per ...
4
votes
2answers
518 views

Securing remotely accessible IP cameras that do not support HTTPS

I have some IP cameras set up on my home network, which is WPA2 protected. These cameras are setup to be accessible from the Internet thru my router's DDNS address, and port number. So for example, ...
1
vote
1answer
223 views

Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly? [closed]

I want to know how to ensure the most complete anonymity when browsing the internet and connecting to remote servers: I want to be as anonymous and secret as possible. I don't know exactly how VPNs ...
0
votes
0answers
64 views

Reverse proxy and corporate PKI

Here at OU=PKI we've been requested to issue a certificate with CA capabilities to install it in our reverse proxy, so that it could issue trustable certificates for every single web. (SSL ending) ...
-1
votes
1answer
59 views

Determine if Tor works

I have installed Tor on my Mint computer, but how do I determine if Tor is working? When I visit http://whatismyip.com, my old IP is shown. Should it not be a different IP when I'm using Tor? Here is ...
1
vote
1answer
71 views

Using Fiddler to capture few important Details

I want to implement the following requirement. In an online Bank Transaction, a User wants to send an amount of $1000 to an Account A. I want to see that the request is going unmodified to Banking ...
1
vote
3answers
500 views

Go through proxy server to Find an original IP Address [closed]

I work for a small company who has troubles with third parties selling our products on Amazon. Sometimes those third parties have websites and when I use an IP address finder online it gives me ...
0
votes
1answer
267 views

Using Proxy Server, can gateway know which URL i am trying to open

I am using a Proxy for example UltraSurf, if I try to open a URL in my web browser, obviously web browser is going to send this information to my Proxy, then Proxy is going to communicate my Gateway. ...
0
votes
2answers
122 views

Are SSL encrypted communications through a company network safe?

If I'm using Skype, Facebook, or another type of communication at my work, can the network administrator see my Skype and Facebook conversations, although its encrypted with SSL? I found this text: ...
8
votes
2answers
745 views

HTTPS login vs MITM attack

http://www.troyhunt.com/2013/05/your-login-form-posts-to-https-but-you.html My question is, if the threat is that someone controls your internet connection and can serve up bad login pages, couldn't ...
1
vote
2answers
124 views

How Web-proxy and Virtual-Hosting are complications for HTTPS?

While studying HTTPS and related transport layer security protocols(SSL/TLS), I came to know that HTTPS suffers from two complications - Web-Proxy and Virtual-Hosting. I can understand how ...
-1
votes
1answer
244 views

bypass proxy using another ip address

I have a scenario in which i have two computers with static ip address that run under common proxy..and lets say computer A is blocked from accessing certain site lets say,www.facebook.com and another ...
3
votes
3answers
158 views

Can ISP detect a proxy connection's contents?

No idea if this is right place to ask. In my country, by law, all ISPs are required to block certain websites. People can not access such sites. But, through proxy websites every one can access ...
-2
votes
1answer
85 views

How to get orignal ip of user even if he is using proxy [duplicate]

Question is clear from title, is there a way to track user even if he is using a proxy. The point is, am i secure enough to surf internet with proxy to hide myself?
0
votes
2answers
72 views

Using a Proxy to Log Http/s requests and Performance Evaluation

I have to read http/https messages sent from a client system and see that the messages are not being modified within system by any malware and the server receives what exactly the user wants to send. ...
0
votes
1answer
119 views

Which OpenSource Proxy is Better and easier to use? [closed]

I have to read http/https messages sent from a client system and see that the messages are not being modified within system by any malware and the server receives what exactly the user wants to send. ...
0
votes
3answers
294 views

OWASP ZAP Proxy HTTP issue?

I am using ZAP 2.2.2 and I have generated a dynamic SSL certificate and added it to my Firefox browser. I then started a proxy on localhost with port 8090 and configured Firefox to use it. When I ...
0
votes
1answer
57 views

Is it reasonable to use a security proxy when integrating two web applications?

Background: We're in the process of integrating two web applications. The other one, application A, is a publicly accessible Internet service, which is provided by a third party and which offers Web ...
0
votes
1answer
54 views

Key Management in Interception Proxies?

I'm reading Jarmoc's Black Hat presentation on SSL/TLS Interception Proxies and Transitive Trust. I have a few questions on some of the key management practices. In the paper, Jarmoc states: To ...
1
vote
1answer
121 views

Is authentication through proxy sites safer?

usually in office or wherever whenever we are blocked with gmail and facebook websites,we used to browse the site with the proxy sites,we used to pass our login data through proxy sites,my question is ...
2
votes
2answers
160 views

Does reverse proxy between two web servers impact security of both?

Situation: Consider the site: example.com, hosted at web server A. A WordPress blog is to be installed on a different web server, B. In order to route a WordPress installation to a subdirectory on ...
1
vote
3answers
871 views

Does a TLS interception proxy present the user's browser with the end server's certificate?

I know that TLS (commonly but mistakenly called SSL) interception works by establishing two encrypted tunnels between a client and server, with the interception device (proxy) terminating both tunnels ...
2
votes
1answer
393 views

HTTP Reverse Proxy: Correct way to do SSL to backend

If I have a HTTP reverse proxy that communicates with it's backends in an untrusted datacenter, or across datacenters, I would want to use HTTPS in the backend, as talked about here: Reverse Proxy ...
1
vote
1answer
39 views

Is it possible to use AH in transport mode on an IPSec channel with mediation?

I understand that it's not possible to have Autentication Header with a regular NAT, because it messes with the IP header protected by AH. How about proxies? Do they change anything in the packet? ...
3
votes
1answer
818 views

Documented Best Practices for Reverse Proxy Implementation

I'm looking for some best practices documentation for implementation of a reverse proxy. We need to allow an internal database / web server incoming access to the outside world and are trying to ...
8
votes
7answers
1k views

Does a chain of proxies (e.g. one connecting to another and another and so on) make tracing the original IP harder/impossible?

I see nobody here has asked this question. What if one, instead of just using a single proxy, connected a proxy-to-proxy in a very long chain and downloaded something (illegal) using secure packets ...
0
votes
1answer
370 views

Just found out my internet was routing through a proxy, how screwed am I?

I checked my internet setting today and it seem that everything has being going through some proxy server for the last few weeks. How screwed am I? Could they get my internet login password? All my ...