The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

0
votes
1answer
373 views

Just found out my internet was routing through a proxy, how screwed am I?

I checked my internet setting today and it seem that everything has being going through some proxy server for the last few weeks. How screwed am I? Could they get my internet login password? All my ...
0
votes
1answer
111 views

Hacking through a browser? [closed]

I was looking at this question: How can you be caught using Private VPN when there's no logs about who you are? and everyone who read it and responded seemed to be taking for granted that every ...
3
votes
4answers
485 views

Outbound proxy which whitelists by server certificate?

Short version: Are you aware of any proxy or firewall device which will permit outbound SSL connections to hosts with approved* SSL certificates only? Long version: Consider the following ...
0
votes
4answers
178 views

If you connect through a website via a proxy, and the proxy doesn't save information, can you still be linked back?

Say I connect to a specific proxy that I know will not keep information/data about who connected to it, and I go to a website and do something deliberately illegal. If the "middle-server" doesn't have ...
0
votes
1answer
122 views

Proxy aware or DNS capable meterpreter?

I'm having issues traversing a proxy protected network and was wondering if there are meterpreter implementations which allow proxy awareness (automatically using windows AD credentials) or which can ...
0
votes
1answer
357 views

How to MiTM SSL on a device with no proxy settings

I'm trying to MiTM a device on my network and having some problems. SSLstrip doesn't work because the URL is https://, and I can't use something like Fiddler because the device has no configurable ...
1
vote
0answers
574 views

Tor alternatives (change IP address often) [closed]

Are there any services that like Tor let you have many IP addresses and change them quite often? PS. The problem with Tor is that they list publicly their exit nodes, so its very simple to detect that ...
1
vote
1answer
181 views

Long-lived SSL connections to dynamic IP addresses

I'm seeing some odd behaviour on my proxy server logs since I started blocking direct outbound connections to port 443 (thus forcing applications to use the proxy server for HTTPS connections). I'm ...
3
votes
1answer
1k views

How can I detect if someone is using an ssh tunnel as a proxy to connect to a VPN?

I've got an SSH server setup in a remote location, which I use to tunnel traffic from an android tablet. On the tablet, I have the Cisco AnyConnect app to connect to my company's VPN. We want to be ...
1
vote
1answer
4k views

Configure OpenVPN as a local proxy to use it only when needed

First, I think it is the proper place to post my question (and not serverfault or networkengineering). If not, please tell me what's the correct place. I used FreeGate. I configured the Firefox ...
0
votes
1answer
1k views

Problems with intermediate ssl certificates and ssl proxy

I'm currently implementing a SSL-proxy, and have run into some problems regarding certificates. We have a offline "Company Root CA", and an online "Company intermediate CA". On the proxy I have ...
1
vote
2answers
93 views

non-MiTM Reverse SSL

Do non-MiTM Reverse SSL Proxies exist? Or do all proxies that do SSL-SSL mappings decode and then re-encode HTTPS traffic? If this is the case and I want to map https://mypublicdomain.com -> ...
1
vote
1answer
299 views

ReverseProxy and PCI Compliance

My company has a PCI compliant billing gateway and they expose a service for submitting credit card payment details. I am writing a (Single Page Application/end-to-end javascript) website for them ...
5
votes
2answers
561 views

How does dnsleaktest.com find my DNS provider

Can't see how they find this over the web. I'm on Windows, its in my network config. It changes when I use a VPN provider, but not when I use a local socks proxy connected to a remote server over ...
3
votes
3answers
1k views

SSL VPN Detection and possible to block

Is it possible to determine the difference between a VPN on port 443 compared to standard SSL traffic? In order to access SSL websites you need port 443 open but if you setup a VPN Service on port ...
-2
votes
1answer
208 views

Identifying Visitor's using Proxy [duplicate]

I want to detect my website visitor's using any duplicate proxies ? If so how to avoid them? also how to identify the proxy is an HTTP proxy or a SOCKS proxy ?
0
votes
1answer
709 views

Is there a way to block Ultrasurf OR can I have McAfee nuke it?

I'm working for a high school. We have given every student their own laptop. Some of our students have figured out how to bypass our web filter using a program called Ultrasurf. If you're not ...
1
vote
0answers
108 views

Why my proxy is still having some connections blocked

I am behind a firewall in France. I connect to proxy A, in Ireland with Dante via SSH port 22 and make a tunnel forwarding port 1080. The proxy works as expected but still having a port range ...
0
votes
1answer
278 views

configure squid to use another digest proxy

I'm connected to a squid proxy that does digest authentication , and I have installed another squid proxy on my centOS 6.4 and configured it to use the upper proxy . The problem is that I need ...
2
votes
3answers
6k views

Why is JavaScript disabled in the Tor Browser Bundle?

Didn't Tor create a local socks proxy? Why doesn't all the Web traffic go over this local socks proxy and why is JavaScript disabled in the Tor Browser bundle? If you would connect with firefox for ...
3
votes
1answer
136 views

Is using a WebServer as a proxy a secure solution

There are 2 machines - both running Windows Server. Machine1 can access the internet. Machine2 cannot access the internet, but can access Machine1. Machine2 needs to continuously access one external ...
-2
votes
1answer
9k views

How to run any application through a proxy with PUTTY? [closed]

Maybe I did not search for it the right way but I could not find the solution. Maybe I am misinformed but if I understand correctly I could use PUTTY to run any Windows applications through a proxy ...
5
votes
1answer
458 views

Retrieving client certificate using Tcpdump results in zero length certificate

I am trying to proxy a mobile app (with Fiddler), which sends a client certificate to the server it connects to. I would think that capturing traffic with Tcpdump, retrieving the client certificate ...
1
vote
1answer
665 views

Why can I see the Basic Auth credentials in plaintext when using SSL

I just read this about the security about Basic Authentication over SSL: Is BASIC-Auth secure if done over HTTPS? And I don't get it. I just installed ProxyDroid (http proxy) on my rooted android ...
5
votes
4answers
526 views

One time password over SMS - exposing the Authentication Server to the internet

Consider a Internet Based Website which does authentication. The Web Application can do the authentication by calling an Authentication Server which is not connected to the internet. The ...
7
votes
3answers
3k views

Detecting Tor proxy by reading request headers

I am a newbie to the field of security. As I was trying to explore more about HTTP request and response headers, I came across this website which provides a detailed analysis of the request header ...
0
votes
2answers
4k views

Can you track someone using a proxy? [duplicate]

This is past experience, and is not the case anymore since I am a programmer now and have nothing to do with security anymore. However in the past I had a person constantly trying to make comments of ...
2
votes
2answers
747 views

Allowing user to access password protected website without disclosing the password

A friend of mine has the following problem. She is an accountant and her clients frequently give her their login credentials so she could download their accounting data from various financial ...
1
vote
1answer
570 views

What is the difference between an HTTPS traffic setup with Stunnel and a SSL-VPN

We have a scenario where we cannot connect to our stunnel server running on port 443 on our network, which only allows access to Internet via a proxy server. On the contrary, when we tried a SSL VPN ...
3
votes
1answer
265 views

Can a captive portal be secured [closed]

I am interested in using a captive portal on a public network. After reading the wikipedia article and several questions here on sec.SE, I don't understand how I can secure it, or even, if I can ...
-1
votes
2answers
6k views

How can using a VPN increase network speed? [closed]

There are lots of guides online which suggest that using a VPN or proxy will gain better speed or 'free internet' however this seems unlikely. If my ISP is performing packet shaping on my connection. ...
2
votes
2answers
371 views

Force clients to use proxy [closed]

Here's my network configuration: The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080. I'd like to force all clients to use the proxy server - specifically, ...
3
votes
2answers
899 views

How can I implement authentication in my proxy server?

I have a proxy server, it will have a captive portal page. Users will be required to sign in before gaining access to the internet. So far I am aware of IP and/or MAC address based authentication. ...
-6
votes
1answer
339 views

How to camouflage at the best on internet? [closed]

What it would be a decent setup to cover your traces on internet and still having a decent connection? SSL? Proxy? Private VPN?
4
votes
3answers
273 views

The safest way to circumventing Iran's Internet censorship

We usually buy services like VPN, SOCKS, Kerio [Kerio Connect?]... to circumvent Iran's Internet censorship policy. Recently, one of the shops started selling [one of] Kerio's products, for which I do ...
-1
votes
2answers
601 views

Allow embedded videos while keeping youtube blocked [closed]

Our organization has launched a training program for employees. the hosting server(internal), has YouTube videos embedded. we have YouTube blocked, and employees access the internet via proxy. How can ...
1
vote
1answer
111 views

SSL Communication and Proxy

Let us say that I have a client and a server communicating using SSL. If a hacker sets up a proxy between the client and the server, will he be able to decrypt the data which is being sent?
1
vote
1answer
308 views

How should this system be protected from ARP spoofing?

Background My university uses an authenticated (squid) HTTP proxy server for accessing the internet. There are a few reasons for this: They want to track misuse of the connection Our university ...
5
votes
3answers
2k views

Man-in-the-middle Blue coat proxy ssl or what?

I have just discovered that my workplace have enabled some new feature in the blue coat network proxy. It seems like all https certificates in chrome on windows is being issued by this internal ...
8
votes
6answers
763 views

Getting credentials using proxy server

Is it possible to get the username and password we enter into sites like facebook using proxy server? The scenario is like this : 1.My laptop is connected to a network. 2.It is configured to use a ...
1
vote
2answers
372 views

Is there an anti-proxy detection available?

Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
0
votes
1answer
2k views

Proxy / VPN Quality Check / Detection

Is there any way to build a script which detects or rates proxies like Maxmind's proxy detection software? I have already tried to use this code, but it doesn't detect all proxies, in fact it detect ...
1
vote
1answer
292 views

Tor traffic seems to be exiting from different Tor exit nodes - is that expected?

I seem to be observing some odd behaviour whilst experimenting with TOR. It's entirely possible this is just my own ignorance as well, in which case I would appreciate some ...
5
votes
6answers
2k views

Is it possible to locate Tor/proxy users? Spam is getting on my nerves

I'm managing a huge forum (over 15k posts and 500 users) and lately some guy uses a VPN (probably) to spam my forums with topics such as: "GAYGAYGAYGAYGAYGAYGAY" "FRIGHT IS GAY HAHAHAHHAA" "ADMINS ...
2
votes
1answer
722 views

Windows Update - Interception

I'm trying to monitor the HTTP requests/responses made when performing a Windows Update. I have a Windows 8 machine configured with a proxy in IE. I've also imported via netsh for winhttp: netsh ...
8
votes
5answers
4k views

Is a Tor router really safer than a proxy?

If I use a Tor router to browse the regular internet that it has to leave the Tor network through an exit node. Apparently the exit node has all the information from the original user it came from on ...
-2
votes
1answer
374 views

How to test a proxy for tcp and udp traffic? [closed]

Is there a simple way to test a proxy to determine if it is correctly forwarding TCP and UDP traffic? An ideal method would be script-able.
1
vote
1answer
801 views

OpenVPN through company proxy and surfing history

Been trying to find an answer to no avail. Probably I just don't understand the terminology... So if anyone may shed some light in plain English, that would be awesome. I connect to a paid VPN ...
-2
votes
1answer
517 views

Problems configuring Webscrab to intercept trafic from localhost(Webgoat) [closed]

Problems configuring Webscrab to intercept traffic from localhost(Webgoat). I am trying to go through the Webgoat tutorial and at one point I need to use Webscrap. I configured the proxy though ...
2
votes
1answer
463 views

Proxy server and IP address blockade

i am in china. so i use web freer to use blocked sites like face book and you tube. we use broadband connection provided by our university. some times the server goes too down and we can not use ...