The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

1
vote
1answer
44 views

Has anyone used this ICLOAK USB device? [on hold]

Does anyone know about this ICLOAK USB device? Opinions or how well they work? I'm looking for a security solution when I'm using PCs where I work. Occasionally we have to log into to web sites, ...
-1
votes
0answers
12 views

Specify outgoing SSL-Port in mitmproxy [on hold]

how can i change the outgoing SSL/TLS-port of mitmproxy to another port than the default 443? Reason: I want to use mitmproxy with TLS-O-Matic, which operates on different ports. Thank you!
2
votes
1answer
15 views

ettercap use as local proxy [on hold]

Hi everibody and sorry for my english, I'm looking for a way to use ettercap (or another program) to alter TCP traffic (coming from local) on the fly. I used "netsed" with iptables, but netsed is too ...
1
vote
1answer
42 views

SSL Test Server with typicals Flaws [closed]

i am testing different SSL-Proxys and want to know more about their failure-handling. Do you know about an public (test)server (HTTPS) which provides the typical flaws like: Expired certificate ...
2
votes
2answers
58 views

proxy servers and restricted work computers

I have a work-issued computer that I have limited access to the Internet due to the security protocols in place on the device. I want to use this machine at home, for work. I want to be able to hide ...
-2
votes
1answer
59 views

Official proof (document) that Linux is safer and faster than Windows [closed]

I work for the Mexican government, and even though everyone involved in Linux knows that it is safer and runs faster in most instances, I have not found an official document or authority that I can ...
1
vote
3answers
331 views

How to intercept and analyze mobile SSL application traffic?

What is the best way to analyze requests sent by a mobile application over SSL? The communication protocol is not necessarily HTTP/S so intercepting them with BURP/ZAP/Fiddler or any other HTTP proxy ...
0
votes
1answer
41 views

Decrypting SSL within Multiple Products

I've read the various questions tagged [ssl] and [mitm] and [proxy] and I couldn't find a duplicate. I cannot find any documentation on this subject online. All of the traffic is currently flowing ...
1
vote
2answers
3k views

Proxy / VPN Quality Check / Detection

Is there any way to build a script which detects or rates proxies like Maxmind's proxy detection software? I have already tried to use this code, but it doesn't detect all proxies, in fact it detect ...
2
votes
2answers
831 views

Squid proxy and VPN software

I have some questions about squid proxies, we set a squid proxy server to block certain web sites for users. and some users only can access one website that related to our work.but after install some ...
3
votes
1answer
1k views

HTTP Reverse Proxy: Correct way to do SSL to backend

If I have a HTTP reverse proxy that communicates with it's backends in an untrusted datacenter, or across datacenters, I would want to use HTTPS in the backend, as talked about here: Reverse Proxy ...
2
votes
1answer
108 views

How can I intercept XMPP traffic on Android?

I have been learning about security testing on Android apps, and to intercept traffic I was using Burp Suite. I know it works perfectly for HTTP/HTTPS traffic, but most of the messenger apps are using ...
0
votes
1answer
35 views

Splitting data between wifi networks for security

Does there exist, software or technology, that can use more than one wifi network, in such a way that only part of the data travels through each 'side'? You would probably need an end address like a ...
2
votes
2answers
59 views

Would a VPN with changing configs do the same job as different VMs

I was reading this question. So my question: Would using a VPN and swapping out configuration files that change your IP address mask the same as using different VMs?
0
votes
2answers
160 views

Finding the IP address origin of malware attacker behind VPN and proxies

I have a client that wants me to begin doing research on finding the origin of a persistent attacker to their network and employees. I haven't gotten the specifics yet, but I'm trying to think of ways ...
0
votes
1answer
59 views

How does a reverse proxy change the security posture of a web server residing in the DMZ? [closed]

How does the reverse proxy change internal and external security posture with a reverse proxy compared to not having a reverse proxy? For example, you have a publicly accessible iis server, what is ...
1
vote
0answers
66 views

VPN Server + Anonymity + Adblock for mobile Devices

In order to improve private security and anonymity while browsing the web on my mobile devices I wanted to tunnel all traffic to my own server via VPN and use a proxy software to filter unwanted ...
1
vote
1answer
97 views

End-to-end encryption with a reverse proxy and an application server

Lets say that I have an nginx reverse proxy that proxies the traffic to a Tomcat on the same server. I think the most common way to configure this setup is to enable SSL on nginx and then proxy the ...
1
vote
2answers
87 views

Using free subdomains to circumvent web filtering systems

(I was told that this was the place to ask this by someone from Webmasters, if I've got it wrong again please give me a chance!) I'm running a personal proxy service for the use of myself and some of ...
6
votes
2answers
868 views

How does dnsleaktest.com find my DNS provider

Can't see how they find this over the web. I'm on Windows, its in my network config. It changes when I use a VPN provider, but not when I use a local socks proxy connected to a remote server over ...
52
votes
4answers
4k views

What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)

There has been quite a bit of concern noted relating to the recent discovery that Lenovo are pre-installing a piece of Adware (Superfish) which has the capability of intercepting SSL traffic from ...
0
votes
1answer
74 views

Sniffing external networks from a public network (place)

There is something that I can not understand. If you are preparing, building up an attack from a public place (coffee shop, restaurant ect.). How can you be tracked by law enforcement? I'm asking ...
2
votes
0answers
61 views

Rogue WPAD server attack

Today I encountered something I have certainly not seen before first hand. Our IDS blocked some outbound traffic attempts from 5 servers with no WAN access. This traffic was leading to an inactive ...
1
vote
0answers
25 views

Proxpy- certificate issue

I am using proxpy, a proxy server written in Python. It comes with its certificates and after installing one of the certificates in Firefox, I got 'Connection is untrusted'. Any help in this regard ...
1
vote
2answers
93 views

How to force clients to browse Internet through Squid Proxy

I am using Windows Server 2012 in which I have shared internet through NAT to a secondary LAN card using routing and remote service. The problem is that when my clients are browsing through proxy ...
2
votes
1answer
240 views

Intercepting HTTPS Android app traffic

I'm trying to intercept Android application traffic from my Android phone....Basically what worked before was that i had simply installed fiddler proxy on my PC, exported the root certificate (and ...
1
vote
3answers
61 views

Secure tunnel set up in an office environment

Suppose I am a rogue employee and I want to syphon some sensitive data out of the office and I only have office internet access for this. My office internet access needs to go through a proxy server, ...
4
votes
3answers
8k views

How do you properly setup Tor on Windows 7?

How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?
2
votes
0answers
69 views

Securing elasticsearch behind a reverse proxy

I intend to run an Elasticsearch index to store a persistent copy of data retrieved from an external service. My plan is to host the Elasticsearch index on AWS, and have it listen on 127.0.0.1 only. I ...
0
votes
1answer
854 views

internal proxy server vs DMZ proxy server

What would be reason for placing a proxy server in a Demilitarized Zone (DMZ)? I understand that a DMZ is a separate network to your internal network (lies inbetween internal network and firewall). I ...
1
vote
2answers
81 views

Security of HTTP proxies

If POST requests are being made to a website via a browser using an HTTP proxy from sslproxies.org, is it possible to trace the origin of those AJAX requests without having access to the proxy being ...
1
vote
0answers
59 views

HTTP GET Request to a webpage that does not exist [closed]

I am seeing a machine is making a HTTP GET request to webpage (ex: www.sample.com/1.png), proxy devices respond with status code 407 (proxy auth required). But when I checked for the site via ...
2
votes
1answer
141 views

Can a corporate proxy downgrade an SSL handshake?

At work, I'm behind an NTLM Proxy. When the SSL Poodle flaw came out, I hardened the configuration of my private server, and found out that even if the client and server shared common ciphers, some ...
-2
votes
1answer
92 views

Proxies, and how they can be traced

When you make an connection with a proxy and you do something shifty to a server, the people working the server could just call up all ISP's and then your ISP sees the last connection you made was to ...
3
votes
3answers
15k views

How to force ALL programs to use my Proxy?

I have a local proxy on my PC. (localhost:8888) But unfortunately there are many programs which are not able to go through this proxy. So how can I force all my programs to go through my local proxy ...
-1
votes
1answer
349 views

Interpreting anti-hacker-alliance analysis [closed]

One of security tools available for web browsing is (http://anti-hacker-alliance.com) Please find below two readings: a) Reading for IP 205.x.x.x that state among other-things "you are using proxy ...
0
votes
1answer
101 views

Iphone app not allowing proxy

Hi everyone I am interested in how a banking app works, especially the way it handles https requests. So I installed one, set my proxy settings, started burp suite and expected it to work. As you may ...
8
votes
4answers
22k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
1
vote
1answer
176 views

How can I convert a Windows certificate into a PEM format, that includes the chain + root?

I need to import a certificate into a Cisco Ironport for Web SSL inspection. The only input format supported is PEM. Based on my research the PEM format does support all certificates in the chain, ...
17
votes
3answers
12k views

Authenticating a Proxy server over HTTPS

When browsing to a website over HTTPS, the web browser typically does a lot of work in the background - negotiating a secure channel, validating the site's certificate, verifying the trust chain, etc. ...
1
vote
1answer
120 views

What does proxyexec + cagefs.server mean in the e-mail X-Source-Args?

I've the following headers in the e-mail which I've received as spam: X-Source: X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/run/proxyexec/cagefs.sock/socket /bin/cagefs.server X-Source-Dir: ...
2
votes
1answer
99 views

Standard for Determining the Anonymity Level of a Proxy

Is there a standard for determining the anonymity level of a proxy? After reading various articles, I have come to the conclusion that you determine the anonymity level by analyzing the headers but I ...
5
votes
3answers
4k views

How trustable are third party root certificates?

I recently tried to use Fiddler2 from a third-party vendor Telerik. While decrypting the HTTPS traffic of my network, it asked me to install its own root certificate in my Windows operating system: ...
0
votes
1answer
118 views

MITM faking certificates

I am looking at the theory behind MITM attacks in order to see some unencrypted packets from the 3DS. From research here is what I understand so far: 3DS > Proxy > Nintendo server I am going to try ...
1
vote
1answer
65 views

VPN Tunnel Routing Question

I'm a little confused about how VPNs work ... I read that they provide an end-to-end encrypted tunnel between you and whoever you're trying to connect to but is that actually the case? VPNs let you ...
1
vote
2answers
87 views

MITM on program with no proxy settings

I'm trying to inspect the traffic of a program (which is running on my computer) that uses SSL over TCP to a non-standard port. The traffic may or may not be HTTP traffic, likely isn't. Neither ...
0
votes
1answer
171 views

iptables intercept received packet with proxy and then forward to destination

Lets say I receive internet through my eth1 port and share it via hotspot to other devices (wlan0 port) [internet]----(eth1)[my computer](wlan0 hotspot) | ...
1
vote
2answers
794 views

Intercepting SSL traffic on Android app

I am trying to intercept SSL traffic from my Android app to test the security. I am using certificate pinning in the hopes I can prevent people from snooping. I have tested by configuring ProxyDroid ...
1
vote
1answer
1k views

Can wifi network administrators see through proxy servers?

I've looked at a lot of VPNs, and "what's my ip address" sites confirm that outsiders can't tell where I really am when I'm using them, but I haven't been able to get my own WiFi yet, so I don't know ...
1
vote
2answers
64 views

making online transactions over proxy

So I went over quite a lot of topics here and on the internet.. but I still can't seem to completely understand this issue. How secure really are services like proxies, VPN or VPS? VPN is promoted ...