The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

3
votes
1answer
56 views

Can a .DER be converted to a .PFX / .P12 ?

Burp-Suite's http://burp/cert:8080 web-interface for downloading the CA Certificate only provides a .der encoded certificate, but for a particular use-case scenario I require a PKCS#12 .pfx/.p12. I ...
4
votes
1answer
35 views

How do I turn off automated testing in OWASP ZAP?

I am trying to find out how to turn off the automated scanner in ZAP. I am not even sure if it is on. How and where can I tell if the scanner is on? I just want it to be a pure proxy for the time ...
3
votes
2answers
36 views

Does rotating proxy provide better privacy?

We have anonymous rotating proxy service like ProxyMesh. ProxyMesh provides 14 rotating IP address proxy servers, each with 10 IP addresses rotating twice per day, giving you a total of 280 IP ...
0
votes
1answer
30 views

How to connect to Windows RDP and delegate authentication to a (reverse) proxy?

Looking for the following setup: Client connects to Windows RDP server through proxy server. The client is in public network hence can't send username/password for logon. The proxy server in between ...
1
vote
1answer
41 views

Can proxy server access my cookies and use it?

I recently forgot to turn off proxy and connect through a premium account, will the owner of proxy server be able to use the cookies and access the account?
4
votes
1answer
121 views

Why is BlueCoat proxy passing HTTPS communication to Google sites?

I have a machine behind corporate BlueCoat's proxy server. For any HTTPS site I get a certificate signed by BlueCoat's CA, for example: BlueCoat *.duckduckgo.com The only exceptions are sites ...
0
votes
1answer
40 views

Network configuration: Preventing my computer being used as a proxy?

I recently installed an extension for Chrome called Hola (skip to next paragraph if you know it). It calls itself a VPN, but is basically a proxy pool AFAIK. You can choose a country from a list in a ...
-3
votes
0answers
18 views

Are Bouncers just for IRC? [migrated]

I got to know of a new type of software that allows you to hide your IP address. A Bouncer Now are bouncers just for the IRC network or can I channel all my internet traffic through it ? If so ...
0
votes
0answers
20 views

Is there a way to make sure my SOCKS proxy is connecting through HTTPS?

Disclaimer: newbie. What I mean is, if I set the SOCKS proxy to a program to let him connect through the tor network and this program connects to different websites (because it is required, e.g. a ...
0
votes
0answers
20 views

Client blocking based on PKI

I've got following scenario: Own PKI in a private network Some webservers in the private network, accessed by load balancing via proxy from the web Now I'd like to block all clients their ...
2
votes
0answers
746 views

Can SSH tunneling over DNS tunnel work in China to use free WiFi at airport?

I have followed a tutorial here: http://ebnj.net/sshoverdns/ This tutorial tells us how to carry all internet traffic via DNS tunnel if your airport enables no-limit outgoing DNS. This guides us to ...
0
votes
0answers
44 views

shared hosted web server used as forward proxy

When setting up personal anonymous forward proxy server, different hosting can be chosen. In the case of shared hosting, web server, transformed into proxy server, shares it's IP with hundreds of ...
1
vote
1answer
967 views

Privacy error in google chrome

Recently I installed some random softwares on my windows 8.1 PC from the internet and along with that some malware also got installed. I started getting " Your connection is not private " error in ...
0
votes
0answers
24 views

ostinato as replacement for fiddler

Can ostinato be used like fiddler? Fiddler acts as a proxy for recorded traffic and all responses on Wireshark appear to be coming from a local IP where fiddler is hosted. I have a use case where the ...
0
votes
1answer
45 views

Forwarding traffic to SSLSplit from Android

I want to forward non HTTP traffic to SSLSplit in order to do a MITM attack. How would I forward the traffic to SSLSplit from my Android?
0
votes
1answer
37 views

How do I analyze traffic chain when using both Tor and a browser-configured proxy

For example, I have set up the Tor network in Debian. I then set up proxy in Iceweasel browser (via the Preferences). How can I examine the traffic chain to determine if browser requests first go ...
2
votes
2answers
116 views

Google thinks I am a robot when using proxy, but only in Safari

Google greeted me with this message while being behind a private proxy: Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending ...
0
votes
3answers
62 views

Is anyone held responsible if a VPN/proxy that doesn't log is used for illegal purposes?

How do the anonymous VPN services work? It’s my understanding that if an internet connection is misused for something (such as downloading copyright material or hacking a network etc) then the person ...
2
votes
2answers
91 views

What information can my ISP see using squid proxy?

My ISP provides a transparent proxy to use and I can see that they are using the squid proxy for caching this. What I am wondering is what data can they see and what can they see further if they can ...
2
votes
1answer
129 views

Viewing HTTPs Traffic - ZAP Proxy / MacOS / iOS App

I've noticed a curious oddity with some traffic sniffing from my Apps on my iPhone. I've installed the ZAP Proxy CA Cert on the device, but I've noticed I can sniff some App traffic, and others I can'...
3
votes
2answers
93 views

How to protect from WPAD attacks?

If you are in a Windows network, and you basically connect to a website ; And there is an attacker on Linux who changes the hostname to WPAD and configures WPAD.dat in his system, all your PC's ...
1
vote
0answers
58 views

Charles Proxy: Genymotion with certificate pinning

Is there anyway I can use charles proxy with an android app that is using certificate pinning? I read this thread: http://blog.attify.com/2015/08/24/intercepting-network-traffic-android/ and it says ...
0
votes
2answers
301 views

Can you login to Facebook through a VPN or a proxy?

I've heard that there's a new type of security in Facebook. When logging in they automatically check if the IP Address is similar to that of the original IP during registration. That's in order to ...
2
votes
3answers
77 views

Does a reverse proxy pass keep the backend server anonymous?

If I have an NGINX server at 1.1.1.1 and in the NGINX server you have the config that forwards on http traffic to 2.2.2.2: upstream 123 { server 2.2.2.2; } server { listen 80 default_server; ...
0
votes
1answer
60 views

What prevents ISPs from tracking chain of proxies' (or Tor relays') IP addresses?

I searched all over the internet for the answer for my simple question, but couldn't find anything useful. I already know that police have to access PCs used as proxies or Tor relay nodes to read ...
0
votes
2answers
107 views

Website doesn't provide cookie (csrf token) when connecting over proxy. Why/how?

The Python code below should grab a "csrf token" cookie from Instagram.com, but I get an error message when running the program through any sort of https or socks5 proxy, informing me that the "csrf" ...
1
vote
1answer
163 views

I have internet at home, need to know who visited what? Possible? [closed]

I have internet at home. I wanted to keep a watch on who visited what without putting a computer on for 24 hours and running some proxy software on it. Is there a possibility to get a track of all the ...
0
votes
0answers
16 views

Hamachi as a way to access home vCal / vCard server - security risk?

I have a home server providing a way to sync contacts and calendars between my machines. Until now, I was using it only with computers in my LAN, but recently I need to sync a computer that is on ...
3
votes
2answers
485 views

Nmap through proxy

Using the following command: nmap --proxy socks4://*.*.*.*:25074 -sV -O --reason scanme.nmap.org I'm not sure if nmap is really using the proxy specified Had an idea of scanning "localhost" or "...
0
votes
0answers
84 views

JWT Best Practice

I have a scenario with multiple applications spread across multiple servers. Each of them are utilizing JWT for authentication. All JWT tokens are generated from the same server. I'm trying to ...
0
votes
1answer
116 views

Can my company see that i'm using SSH?

In my company we use our own notebooks. Due to web filters, I decided to create an SSH tunnel to use my home internet connection. My question is: can my company identify that I'm using SSH? I've ...
2
votes
2answers
205 views

How to test my anonymity?

let's assume that I've used proxies and anonymizing tools as much as I want. How to be sure that I'm totally anonymous? I'm not talking only about IP spoofing and identity hiding, but other and ...
0
votes
0answers
20 views

Timeout after setting up proxychains

I've installed ProxyChains on my linux machine and I'm trying to hide my IP over the internet. I went on one of those sites that gives you a list of ips, in this case, proxylist.hidemyass.com and got ...
1
vote
1answer
61 views

Is it possible to utilize an outbound proxy to upgrade to TLS

Given a situation where legacy technology exists from a system and we don't want to do a complete upgrade (.net in this case w/ version that doesn't have any support for TLS 1.1/1.2) as the product ...
2
votes
1answer
58 views

Proxy Server advantage and public ip visible

By using a Proxy Server like 'Cisco WSA' the end user does not need to know where a web service like facebook.com lives, the end user just makes a request to a proxy server and it does the work of ...
1
vote
0answers
50 views

How to perform a MITM between a server and a client program whose local ports are randomly spawned?

I usually used Burp or similar tools for browser-based communications. The client program in question doesn't offer a proxy option to be configured. So I can't use Burp in this case, besides ports are ...
0
votes
1answer
49 views

Possibility for Multi-layer VPN or queries through TOR? [duplicate]

If a user is to fingerprint a server via SQL injection and doesn't want the server to be able to trace back. Is the only way to use a proxy/VPN? Can queries and requests be sent through TOR network? ...
1
vote
0answers
40 views

Proxy help on Kali Linux [closed]

I've recently gotten into using tor and I understand that tor only handles tcp. What I was hoping was to route all of my network traffic from my local machine through what I, at the time, thought of ...
0
votes
1answer
45 views

What are the requirements of becoming a WHOIS Proxy or Privacy service (not a registrar)?

This question was put on hold as off-topic at Webmasters, so I'm hoping it's ok to ask here. I've read up on the (outrageous) costs of becoming, maintaining and operating a registrar, but I cannot ...
0
votes
2answers
94 views

How can website server recognize incoming Tor or VPN connection? [duplicate]

I was trying to signup for a service provided by a website using Tor, the website prevented me and asked me to disable my proxy settings, he noticed me with the following: Our checks indicate that ...
2
votes
0answers
81 views

Mitm Proxy using c# SslStream issues when doing directly from host file [closed]

Im trying to create a local windows MITM proxy with C# to deal with a now unsupported application from a company that no longer exists. The Proxy has to only service one HTTPS domain which is being ...
2
votes
1answer
123 views

Why do I sometimes need to “bypass” SSL intercept?

I use the BlueCoat ProxyClient filter in a small office network (< 50 computers). We have it set for category based filtering and it works perfectly on almost all sites. However, sometimes, we ...
-1
votes
1answer
109 views

Proxy + TOR = anonymous?

I've been doing some research about how to stay anonymous on the net, and I was wondering what if you set up for instance your browser, to run through a proxy and then run through tor? Can I browse ...
0
votes
1answer
36 views

proxy traffic coming from outside server

First of all: I don't know if this comunity is the right one for this question. If it's not I'm sorry in advance. I'm learning about proxies right now and from what I understand I can route my ...
8
votes
2answers
2k views

How is it possible to do TLS through proxy without anyone noticing?

My workplace uses a proxy to connect to the internet, even for https sites. It was my understanding that for this to work, the proxy would be considered a MITM, and the certificate presented would be ...
38
votes
2answers
8k views

Why hasn't anyone taken over Tor yet?

Tor is known to encrypt the transferred content and the meta information by layering the encryption. I know there have been correlation attacks that deanonymized some users by federal agencies. Why ...
0
votes
0answers
888 views

Is it possible to intercept ssl with burp on iOS 8.3

I have tried to intercept SSL connection on iOS 8.3 using BURP Proxy. I receive the error "There was a problem communicating with the secure web proxy server (HTTPS)." Is it because of some ...
-1
votes
1answer
82 views

Can VPN,proxy servers and TOR evade/remove Browser Fingerprinting in terms of anonymity? [duplicate]

If not what are other ways to beat browser fingerprinting?Thank you.
0
votes
1answer
47 views

Any way to get high quality live proxies other than buying them from a website?

Free & public proxies are not safe when transmitting sensitive info, but even if they were are much too slow. I can't purchase due a potential security risk. I looked into and tried proxy ...