The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

2
votes
2answers
95 views

Using separate HAProxy and API tiers, how can I ensure a request came from HAProxy?

I have two machines and a HAProxy machine doing SSL termination and accepting client certs successfully. How can I configure HAProxy to ensure that the messages coming into the API box are from ...
0
votes
0answers
12 views

Ethical way to get past a proxy server? [migrated]

I am working with lwIP on an embedded device that wants to connect via DHCP to a flexible LAN. Sometimes the device will want to connect to a network with a proxy server. How to I make the DORA ...
4
votes
4answers
232 views

proxy servers and restricted work computers

I have a work-issued computer that I have limited access to the Internet due to the security protocols in place on the device. I want to use this machine at home, for work. I want to be able to hide ...
1
vote
3answers
111 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
-1
votes
2answers
46 views

Is it possible to perform bruteforce attack with proxy on a website?

When one does brute force attack online, most probably the person will get caught easily,isn't there a way of doing brute force for example on a website without getting caught?
0
votes
1answer
29 views

How cloud based web proxy works (ex:Zscaler)?

1) How zscaler see the clients traffic from cloud and how it filters malicious traffic? 2) How zscaler protects the web applications from external threats?
2
votes
4answers
6k views

Does a TLS interception proxy present the user's browser with the end server's certificate?

I know that TLS (commonly but mistakenly called SSL) interception works by establishing two encrypted tunnels between a client and server, with the interception device (proxy) terminating both tunnels ...
3
votes
2answers
118 views

Would a VPN with changing configs do the same job as different VMs

I was reading this post: Can a website still detect my real MAC address even if I use different virtual machine each time I visit the website? So my question: Would using a VPN and swapping out ...
1
vote
1answer
63 views

Some specific website not loading when proxy through Burp

I am conducting web application pentest in which all the traffic will go through BurpSuite. In addition, SOCKS proxy is used so all the requests are sending out from a fix company IP address. ...
3
votes
4answers
188 views

Is a reverse proxy worth it?

Is a reverse proxy worth it? There are so many unsecured sites using a reverse proxy and I feel like that doesn't protect them. After all if they have an error in their SQL that could be use for ...
4
votes
3answers
2k views

Intercepting SSL traffic on Android app

I am trying to intercept SSL traffic from my Android app to test the security. I am using certificate pinning in the hopes I can prevent people from snooping. I have tested by configuring ProxyDroid ...
4
votes
1answer
76 views

How to defend against a Spoofed-IP Blacklist DOS attack?

So I've implemented an IP Blacklist for the /login endpoint on my server. If any IP fails to login more than x number of attempts in x number of minutes the requesting IP is blacklisted for x number ...
1
vote
1answer
78 views

Using dnscrypt on a public hotspot with a captive portal

What strategy shall I take if I wanted to use a dnscrypt with a public hotspot that requires login through a captive portal? Such hotspots require DNS settings to point to their servers (via DHCP) so ...
3
votes
2answers
38 views

Application level proxy on HTML. Capabilities

I am studying for a network security exam. I found in an old exam the following question and I have no idea of the answer: A company is protecting its intranet by a multi-homed bastion host B, ...
3
votes
1answer
65 views

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

At the simplest form - the question is to block external proxy due to an emergency situation due to which management have forced technical teams to get a solution to block all the external proxy or ...
6
votes
4answers
4k views

Man-in-the-middle Blue Coat proxy SSL or what?

I have just discovered that my workplace has enabled some new features in the Blue Coat network proxy. It seems like all HTTPS certificates in Chrome on Windows are being issued by this internal ...
8
votes
2answers
808 views

Are future TLS versions going to prevent traffic inspection?

Nowadays it is possible to inspect (unencrypt) TLS (HTTPS) traffic inside an organization. The mechanism consists in using a root CA that is configured in the web client and a network device that ...
2
votes
0answers
65 views

Unable to access “encrypted.google.com” with “proxy.googlezip.net”

I use Google data compression proxy with Firefox (Abrowser 38). Most websites are loaded without any problem but unable to access encrypted.google.com So, is this is normal? i.e I've to use system ...
3
votes
1answer
143 views

How do Cloud Encryption Gateways and CASB work?

Cloud Encryption Gateways (CEG) and Cloud Access Security Brokers(CASB) are becoming popular to ensure the security and confidentiality of the data leaving to Cloud Service Providers. How do they ...
2
votes
0answers
190 views

Why my proxy is still having some connections blocked

I am behind a firewall in France. I connect to proxy A, in Ireland with Dante via SSH port 22 and make a tunnel forwarding port 1080. The proxy works as expected but still having a port range ...
10
votes
3answers
236 views

Why don't despotic countries simply block all encrypted traffic?

This is a question I often think of when I hear about countries considering blocking just one protocol with encryption, such as tor: How would a resourceful government block tor. Clearly France ...
0
votes
1answer
42 views

What's the best practice for MitM'ing https traffic to distinguish self-signed certs?

My organisation is concerned about viruses and attacks coming into our network. Since http traffic has been declared persona non grata by some browser makers and other parties, it becomes ...
3
votes
3answers
176 views

Can one Bypass a Web Proxy by using the Host File?

a website aaa.com has a Static Public IP address x.x.x.x . Client B resides in a network and it accesses the internet through a web proxy C. How the web requests are routed from B to the proxy is ...
1
vote
0answers
75 views

bypass proxy metasploit

I am working on a student project with the goal to exploit navigator vulnerabilities on weak Windows XP SP2 and/or Linux computers using only Metasploit Browser Autopwn 1 & 2. Seems trivial but ...
4
votes
3answers
1k views

Reveal the True IP of a User

Is there any best practice method (and preferably documented) way of revealing the True IP of a user using a HTTP(S) connection? I.e.: To be able to uncover the true IP from transparent as well as ...
0
votes
3answers
102 views

How can I pretend to be accessing from another country and still do not flag up as possible fraud? [closed]

I live outside the UK and because of my work I make a lot of purchases on UK websites using my UK billing addresses. One problem I have is that sometimes if the billing country is different from the ...
0
votes
1answer
77 views

Strange browsing problem, unknown images

When I open any site, I sometimes see unknown images replacing the original images on the website. They are not ads and can't be clicked. Just random images of people, cartoons etc. When I refresh ...
-1
votes
1answer
543 views

Bypass proxy using another IP address

I have a scenario in which I have two computers with static IP addresses running under common proxy. And let's say computer A is blocked from accessing certain site, let's say Facebook and another ...
0
votes
2answers
61 views

Why does malware modify proxy settings?

During dynamic analysis, I have noticed that Adware and some Trojans modify the proxy settings within the Windows Registry. What is the purpose behind making this modification? The most common keys I ...
3
votes
1answer
36 views

Connection not secure when using a proxy

I connect to the Internet using a proxy at my university residence and I noticed at some sites (like my bank and PayPal), the browser reports that: it's unable to check if the website certificate ...
2
votes
1answer
93 views

Proxied server requests + forwarding authentication info in a secure fashion

We are using PassportJS with a couple of Node.js servers - Passport is just a library that is popular for Node.js server authentication - but we have some questions about how to use Passport with ...
4
votes
2answers
99 views

Why is it dangerous to socksify a whole system?

Today, I configured my browser to use a ssh/SOCKS5 proxy setup to keep my web traffic confidential even when browsing from insecure networks (e.g. a public WLAN hotspot). I was then thinking that it ...
2
votes
1answer
50 views

Fixing DNS leak - transparent proxy

My ISP is using a transparent proxy to intercept my DNS lookup requests when using VPN. Is there a way to prevent that? I am using Lubuntu if that makes any differance.
3
votes
2answers
72 views

Reverse Proxy or direct?

imagine I have an architecture as shown. In order to get to the internal web server, should I use a reverse proxy like as shown and redirect traffic to my web server? Is this a more secure way ...
3
votes
2answers
54 views

Reverse proxy or Public load balancer?

What would be the difference between putting in a load balancer or reverse proxy on the perimeter to send requests back to a system in our LAN? We don't want to have people NAT directly into the LAN, ...
4
votes
1answer
439 views

Is it possible to log web sites that require Adobe Flash?

We would like to block the use of Flash on our internal network, but believe that several business-critical sites may still rely on that app. I'd love to be able to "watch" the traffic for several ...
1
vote
2answers
515 views

How can I see the websites visited by clients of my WLAN?

How can I view the websites that are visited by the user of my wifi? What tools are required to do this? And one more question: can I see the WhatsApp communications?
0
votes
0answers
35 views

What are the defenses against SSL Interception? [duplicate]

SSL/TLS Proxies allow traffic interception by doing a MITM. Are there any active defenses against this to protect privacy of the users ?
0
votes
1answer
71 views

Does IP Spoofing mean using a proxy?

As said in question, does ip spoofing mean that someone uses a proxy, thereby he/she appears as different ip in the internet world?
6
votes
3answers
7k views

How trustable are third party root certificates?

I recently tried to use Fiddler2 from a third-party vendor Telerik. While decrypting the HTTPS traffic of my network, it asked me to install its own root certificate in my Windows operating system: ...
0
votes
0answers
19 views

How to configure proxy settings of cellular internet for burp

I am pen testing an android app and using tethering to connect my phone to my laptop. I configured the access point settings as proxy = ipv4 address of my laptop and port = port on which burp is ...
1
vote
1answer
80 views

Reverse Proxy SSL container

Technically and security wise, can a reverse proxy act as a "container" for SSL certs ? Meaning, for example currently my web server is running on ssl (https). Can I move the SSL cert to the reverse ...
2
votes
2answers
51 views

About browsers injectors (Sonic Train)

I know that viruses use some ways to inject some ADs in the browsers web pages like : 1-Inject an extension 2-Inject some codes to the browser process 3-With a proxy server 4-Install an injected ...
3
votes
1answer
113 views

How to forward HTTP/SOCKS proxy on same port to SOCKS server?

I have socks server (TOR) and can "convert" it into HTTP/HTTPS one via Polipo or something like this. But I want to use it transparently as HTTP or SOCKS on the same port. I have experience with ...
0
votes
1answer
99 views

My ISP using a transparent proxy

I found that my internet service provider uses a transparent proxy on some sites and apps like Google, Whatsapp, etc. I know they use it to save bandwidth but my question here is if they are able to ...
42
votes
9answers
36k views

Can my company see what HTTPS sites I went to?

At work my company uses internet monitoring software (websense). I know if I visit a https ssl-encrypted site (such as https://secure.logmein.com) they can't see what I'm doing on the site since all ...
0
votes
1answer
63 views

How to configure WebScarab to intercept only POST requests?

I'm trying to make WebScarab intercept only POST requests. On the Intercept tab below Methods I've selected only POST, but it still intercepts all GET and POST requests, so it's quite hard to tamper ...
2
votes
1answer
79 views

How can an attacker redirect victims through proxy

Let's say that an attacker is behind a proxy that's using NAT or PAT. Is it possible for him to redirect victims to his machine to achieve some attacks like web phishing or opening reverse TCP ...
2
votes
1answer
99 views

How does an entity on a network (e.g. sysadmin, security software) identify that a user is connecting to the internet with a proxy?

For example, the security software iBoss is able to detect if you are using a proxy. Proxy Circumvention Proxy attempts to circumvent your Internet security solution not only violate your ...
6
votes
1answer
918 views

How does a website detect proxy? [duplicate]

How can a specific website detect that I'm surfing via proxy? Is there a way to use proxy and not get detected? If so, how?