The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

2
votes
0answers
124 views

Mitm Proxy using c# SslStream issues when doing directly from host file [closed]

Im trying to create a local windows MITM proxy with C# to deal with a now unsupported application from a company that no longer exists. The Proxy has to only service one HTTPS domain which is being ...
2
votes
1answer
149 views

Why do I sometimes need to “bypass” SSL intercept?

I use the BlueCoat ProxyClient filter in a small office network (< 50 computers). We have it set for category based filtering and it works perfectly on almost all sites. However, sometimes, we ...
-1
votes
1answer
118 views

Proxy + TOR = anonymous?

I've been doing some research about how to stay anonymous on the net, and I was wondering what if you set up for instance your browser, to run through a proxy and then run through tor? Can I browse ...
0
votes
1answer
39 views

proxy traffic coming from outside server

First of all: I don't know if this comunity is the right one for this question. If it's not I'm sorry in advance. I'm learning about proxies right now and from what I understand I can route my ...
8
votes
2answers
2k views

How is it possible to do TLS through proxy without anyone noticing?

My workplace uses a proxy to connect to the internet, even for https sites. It was my understanding that for this to work, the proxy would be considered a MITM, and the certificate presented would be ...
38
votes
2answers
8k views

Why hasn't anyone taken over Tor yet?

Tor is known to encrypt the transferred content and the meta information by layering the encryption. I know there have been correlation attacks that deanonymized some users by federal agencies. Why ...
0
votes
0answers
921 views

Is it possible to intercept ssl with burp on iOS 8.3

I have tried to intercept SSL connection on iOS 8.3 using BURP Proxy. I receive the error "There was a problem communicating with the secure web proxy server (HTTPS)." Is it because of some ...
-1
votes
1answer
84 views

Can VPN,proxy servers and TOR evade/remove Browser Fingerprinting in terms of anonymity? [duplicate]

If not what are other ways to beat browser fingerprinting?Thank you.
0
votes
1answer
53 views

Any way to get high quality live proxies other than buying them from a website?

Free & public proxies are not safe when transmitting sensitive info, but even if they were are much too slow. I can't purchase due a potential security risk. I looked into and tried proxy ...
2
votes
2answers
155 views

Is a vpn connection through a proxy more secure?

At the moment there are a number of online services (Hide my ass or PIA) that offer some type of security through an VPN connection. This of course can work, but the big problem (for me at least) ...
0
votes
2answers
170 views

Are credentials sent via plain text to HTTP proxy?

If a proxy server requires authentication, and that proxy communicates over HTTP, are the credentials sent over plain text to the proxy server? If this is the case, isn't it possible to sniff the ...
0
votes
0answers
103 views

Intermediate proxy intercepting my SSL data between my computer and the ISP

I did a simple scan of my linux firewall today using grc.com's shieldsup on their website (https://www.grc.com/x/ne.dll?bh0bkyd20). Previously when doing this it shows I have full stealth but today it ...
1
vote
1answer
109 views

Is there any way or tool to check whether a particular iOS app is implementing SSL Pinning functionality?

I'm just learning the iOS security. This is completely a beginner question. I'm trying to figure out whether there is any particular way to check if an iOS app is implementing SSL Pinning ...
2
votes
2answers
183 views

Block mobile tethering on android phones from Windows (DLP)

In our small organisation I have tried my best at implementing DLP by: Making sure users access all files from the server Local disks are denied access (forced to work only on network drives) ...
1
vote
3answers
381 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
-1
votes
2answers
267 views

Is it possible to perform bruteforce attack with proxy on a website?

When one does brute force attack online, most probably the person will get caught easily,isn't there a way of doing brute force for example on a website without getting caught?
0
votes
1answer
333 views

How cloud based web proxy works (ex:Zscaler)?

1) How zscaler see the clients traffic from cloud and how it filters malicious traffic? 2) How zscaler protects the web applications from external threats?
1
vote
1answer
335 views

Some specific website not loading when proxy through Burp

I am conducting web application pentest in which all the traffic will go through BurpSuite. In addition, SOCKS proxy is used so all the requests are sending out from a fix company IP address. However,...
3
votes
1answer
109 views

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

At the simplest form - the question is to block external proxy due to an emergency situation due to which management have forced technical teams to get a solution to block all the external proxy or ...
3
votes
2answers
56 views

Application level proxy on HTML. Capabilities

I am studying for a network security exam. I found in an old exam the following question and I have no idea of the answer: A company is protecting its intranet by a multi-homed bastion host B, ...
8
votes
2answers
900 views

Are future TLS versions going to prevent traffic inspection?

Nowadays it is possible to inspect (unencrypt) TLS (HTTPS) traffic inside an organization. The mechanism consists in using a root CA that is configured in the web client and a network device that ...
4
votes
1answer
127 views

How to defend against a Spoofed-IP Blacklist DOS attack?

So I've implemented an IP Blacklist for the /login endpoint on my server. If any IP fails to login more than x number of attempts in x number of minutes the requesting IP is blacklisted for x number ...
2
votes
0answers
137 views

Unable to access “encrypted.google.com” with “proxy.googlezip.net”

I use Google data compression proxy with Firefox (Abrowser 38). Most websites are loaded without any problem but unable to access encrypted.google.com So, is this is normal? i.e I've to use system (...
0
votes
1answer
60 views

What's the best practice for MitM'ing https traffic to distinguish self-signed certs?

My organisation is concerned about viruses and attacks coming into our network. Since http traffic has been declared persona non grata by some browser makers and other parties, it becomes ...
10
votes
3answers
263 views

Why don't despotic countries simply block all encrypted traffic?

This is a question I often think of when I hear about countries considering blocking just one protocol with encryption, such as tor: How would a resourceful government block tor. Clearly France ...
3
votes
3answers
646 views

Can one Bypass a Web Proxy by using the Host File?

a website aaa.com has a Static Public IP address x.x.x.x . Client B resides in a network and it accesses the internet through a web proxy C. How the web requests are routed from B to the proxy is ...
1
vote
0answers
159 views

bypass proxy metasploit

I am working on a student project with the goal to exploit navigator vulnerabilities on weak Windows XP SP2 and/or Linux computers using only Metasploit Browser Autopwn 1 & 2. Seems trivial but ...
0
votes
3answers
195 views

How can I pretend to be accessing from another country and still do not flag up as possible fraud? [closed]

I live outside the UK and because of my work I make a lot of purchases on UK websites using my UK billing addresses. One problem I have is that sometimes if the billing country is different from the ...
0
votes
1answer
112 views

Strange browsing problem, unknown images

When I open any site, I sometimes see unknown images replacing the original images on the website. They are not ads and can't be clicked. Just random images of people, cartoons etc. When I refresh ...
0
votes
2answers
92 views

Why does malware modify proxy settings?

During dynamic analysis, I have noticed that Adware and some Trojans modify the proxy settings within the Windows Registry. What is the purpose behind making this modification? The most common keys I ...
3
votes
1answer
55 views

Connection not secure when using a proxy

I connect to the Internet using a proxy at my university residence and I noticed at some sites (like my bank and PayPal), the browser reports that: it's unable to check if the website certificate ...
3
votes
1answer
283 views

How do Cloud Encryption Gateways and CASB work?

Cloud Encryption Gateways (CEG) and Cloud Access Security Brokers(CASB) are becoming popular to ensure the security and confidentiality of the data leaving to Cloud Service Providers. How do they ...
2
votes
1answer
57 views

Fixing DNS leak - transparent proxy

My ISP is using a transparent proxy to intercept my DNS lookup requests when using VPN. Is there a way to prevent that? I am using Lubuntu if that makes any differance.
4
votes
2answers
208 views

Why is it dangerous to socksify a whole system?

Today, I configured my browser to use a ssh/SOCKS5 proxy setup to keep my web traffic confidential even when browsing from insecure networks (e.g. a public WLAN hotspot). I was then thinking that it ...
3
votes
2answers
130 views

Reverse Proxy or direct?

imagine I have an architecture as shown. In order to get to the internal web server, should I use a reverse proxy like as shown and redirect traffic to my web server? Is this a more secure way ...
3
votes
2answers
92 views

Reverse proxy or Public load balancer?

What would be the difference between putting in a load balancer or reverse proxy on the perimeter to send requests back to a system in our LAN? We don't want to have people NAT directly into the LAN, ...
2
votes
1answer
149 views

Proxied server requests + forwarding authentication info in a secure fashion

We are using PassportJS with a couple of Node.js servers - Passport is just a library that is popular for Node.js server authentication - but we have some questions about how to use Passport with "...
4
votes
1answer
508 views

Is it possible to log web sites that require Adobe Flash?

We would like to block the use of Flash on our internal network, but believe that several business-critical sites may still rely on that app. I'd love to be able to "watch" the traffic for several ...
1
vote
2answers
659 views

How can I see the websites visited by clients of my WLAN?

How can I view the websites that are visited by the user of my wifi? What tools are required to do this? And one more question: can I see the WhatsApp communications?
0
votes
0answers
36 views

What are the defenses against SSL Interception? [duplicate]

SSL/TLS Proxies allow traffic interception by doing a MITM. Are there any active defenses against this to protect privacy of the users ?
0
votes
1answer
89 views

Does IP Spoofing mean using a proxy?

As said in question, does ip spoofing mean that someone uses a proxy, thereby he/she appears as different ip in the internet world?
1
vote
1answer
54 views

How to configure proxy settings of cellular internet for burp

I am pen testing an android app and using tethering to connect my phone to my laptop. I configured the access point settings as proxy = ipv4 address of my laptop and port = port on which burp is ...
2
votes
1answer
248 views

How to forward HTTP/SOCKS proxy on same port to SOCKS server?

I have socks server (TOR) and can "convert" it into HTTP/HTTPS one via Polipo or something like this. But I want to use it transparently as HTTP or SOCKS on the same port. I have experience with ...
1
vote
2answers
56 views

About browsers injectors (Sonic Train)

I know that viruses use some ways to inject some ADs in the browsers web pages like : 1-Inject an extension 2-Inject some codes to the browser process 3-With a proxy server 4-Install an injected ...
0
votes
1answer
175 views

My ISP using a transparent proxy

I found that my internet service provider uses a transparent proxy on some sites and apps like Google, Whatsapp, etc. I know they use it to save bandwidth but my question here is if they are able to ...
1
vote
1answer
156 views

Using dnscrypt on a public hotspot with a captive portal

What strategy shall I take if I wanted to use a dnscrypt with a public hotspot that requires login through a captive portal? Such hotspots require DNS settings to point to their servers (via DHCP) so ...
2
votes
1answer
107 views

How does an entity on a network (e.g. sysadmin, security software) identify that a user is connecting to the internet with a proxy?

For example, the security software iBoss is able to detect if you are using a proxy. Proxy Circumvention Proxy attempts to circumvent your Internet security solution not only violate your ...
1
vote
1answer
124 views

How to configure WebScarab to intercept only POST requests?

I'm trying to make WebScarab intercept only POST requests. On the Intercept tab below Methods I've selected only POST, but it still intercepts all GET and POST requests, so it's quite hard to tamper ...
2
votes
1answer
143 views

How can an attacker redirect victims through proxy

Let's say that an attacker is behind a proxy that's using NAT or PAT. Is it possible for him to redirect victims to his machine to achieve some attacks like web phishing or opening reverse TCP ...
6
votes
1answer
3k views

How does a website detect proxy? [duplicate]

How can a specific website detect that I'm surfing via proxy? Is there a way to use proxy and not get detected? If so, how?