The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.
4
votes
2answers
838 views
Does Java applets reveal the real IP address, even when using proxy or vpn?
Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
1
vote
0answers
66 views
How can I implement authentication in my proxy server?
I have a proxy server, it will have a captive portal page. Users will be required to sign in before gaining access to the internet.
So far I am aware of IP and/or MAC address based authentication.
...
-5
votes
1answer
80 views
How to camouflage at the best on internet? [closed]
What it would be a decent setup to cover your traces on internet and still having a decent connection?
SSL?
Proxy?
Private VPN?
4
votes
3answers
156 views
The safest way to circumventing Iran's Internet censorship
We usually buy services like VPN, SOCKS, Kerio [Kerio Connect?]... to circumvent Iran's Internet censorship policy.
Recently, one of the shops started selling [one of] Kerio's products, for which I do ...
-1
votes
2answers
91 views
Allow embedded videos while keeping youtube blocked [closed]
Our organization has launched a training program for employees. the hosting server(internal), has YouTube videos embedded. we have YouTube blocked, and employees access the internet via proxy.
How can ...
1
vote
1answer
65 views
SSL Communication and Proxy
Let us say that I have a client and a server communicating using SSL.
If a hacker sets up a proxy between the client and the server, will he be able to decrypt the data which is being sent?
-5
votes
0answers
64 views
How can i use Torrent client to download file in Firewalled network where it has been blocked? [closed]
I am using my College wireless network to browse internet and download files via http or p2p, but recently they've blocked all those functionality including torrent. i know some paid VPN service allow ...
3
votes
2answers
959 views
Is it possible to connect to a proxy with an ssl (or otherwise encrypted) connection?
What i want to know is whether it is possible to connect to a proxy with an ssl (or otherwise encrypted) connection? (I'm suspecting this is possible because TOR encrypts user connections to it's ...
10
votes
3answers
1k views
Authenticating a Proxy server over HTTPS
When browsing to a website over HTTPS, the web browser typically does a lot of work in the background - negotiating a secure channel, validating the site's certificate, verifying the trust chain, etc. ...
2
votes
1answer
96 views
How should this system be protected from ARP spoofing?
Background
My university uses an authenticated (squid) HTTP proxy server for accessing the internet.
There are a few reasons for this:
They want to track misuse of the connection
Our university ...
18
votes
8answers
7k views
Can my company see what HTTPS sites I went to?
At work my company uses internet monitoring software (websense). I know if I visit a https ssl-encrypted site (such as https://secure.logmein.com) they can't see what I'm doing on the site since all ...
5
votes
4answers
3k views
Advanced techniques for detecting a proxy/getting original IP
In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used:
Firefox with a proxy ...
8
votes
6answers
208 views
Getting credentials using proxy server
Is it possible to get the username and password we enter into sites like facebook using proxy server?
The scenario is like this :
1.My laptop is connected to a network.
2.It is configured to use a ...
6
votes
3answers
257 views
Man-in-the-middle Blue coat proxy ssl or what?
I have just discovered that my workplace have enabled some new feature in the blue coat network proxy. It seems like all https certificates in chrome on windows is being issued by this internal ...
6
votes
3answers
2k views
Proxy vs. Firewall
I understand that very simply put a proxy is a sort of 'man in the middle' allowing/denying access to certain services/resources. Strictly in terms of security (I mean here privacy, parental control ...
1
vote
2answers
236 views
Is there an anti-proxy detection available?
Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
0
votes
1answer
226 views
Proxy / VPN Quality Check / Detection
Is there any way to build a script which detects or rates proxies like Maxmind's proxy detection software?
I have already tried to use this code, but it doesn't detect all proxies, in fact it detect ...
1
vote
1answer
147 views
Tor traffic seems to be exiting from different Tor exit nodes - is that expected?
I seem to be observing some odd behaviour whilst experimenting with TOR. It's entirely possible this is just my own ignorance as well, in which case I would appreciate some ...
5
votes
5answers
595 views
Is it possible to locate Tor/proxy users? Spam is getting on my nerves
I'm managing a huge forum (over 15k posts and 500 users) and lately some guy uses a VPN (probably) to spam my forums with topics such as:
"GAYGAYGAYGAYGAYGAYGAY"
"FRIGHT IS GAY HAHAHAHHAA"
"ADMINS ...
2
votes
1answer
181 views
Windows Update - Interception
I'm trying to monitor the HTTP requests/responses made when performing a Windows Update.
I have a Windows 8 machine configured with a proxy in IE. I've also imported via netsh for winhttp:
netsh ...
5
votes
5answers
729 views
Is a TOR router really safer than a proxy?
If I use a tor router to browse the regular internet that it has to leave the TOR network through an exit node. Apparently the exit node has all the information from the original user it came from on ...
-2
votes
1answer
105 views
How to test a proxy for tcp and udp traffic? [closed]
Is there a simple way to test a proxy to determine if it is correctly forwarding TCP and UDP traffic? An ideal method would be script-able.
0
votes
1answer
321 views
OpenVPN through company proxy and surfing history
Been trying to find an answer to no avail. Probably I just don't understand the terminology... So if anyone may shed some light in plain English, that would be awesome.
I connect to a paid VPN ...
-2
votes
1answer
82 views
Problems configuring Webscrab to intercept trafic from localhost(Webgoat) [closed]
Problems configuring Webscrab to intercept traffic from localhost(Webgoat).
I am trying to go through the Webgoat tutorial and at one point I need to use Webscrap.
I configured the proxy though ...
1
vote
2answers
395 views
Best practices for operating a Bitcoin-Qt client regarding netwok privacy?
As privacy is part of security, I know there is a Bitcoin SE here but they couldn't answer my question so I hope it's appropriate to ask it here.
I don't ask about how to secure my wallet on my ...
2
votes
1answer
141 views
Proxy server and IP address blockade
i am in china. so i use web freer to use blocked sites like face book and you tube. we use broadband connection provided by our university. some times the server goes too down and we can not use ...
1
vote
1answer
194 views
Route traffic from iphone to dektop and back
Iv'e got some iOS app to pentest, and the target server is accessible only through the iPhone APN.
My problem is, that i want to configure the traffic in such way so i can intercept and tamper HTTP ...
14
votes
5answers
4k views
Does using an http proxy completely hide my real IP address?
If I obscure my IP by going through a free http proxy and visit a page, will that site's admin ever be able to find out my true IP or anything related to my true connection/info?
0
votes
2answers
171 views
Tor - chain of connected nodes?
For a long time now I have been wondering how to find out where you actually connect to with Tor.
The only thing you can do in Vidalia is show a Network Map of all available Nodes worldwide, which is ...
1
vote
6answers
195 views
Secure internet access while traveling
Given the risks of shared wi-fi as stated here, here and here, I would like to ask what are good practices for someone who is always traveling.
While having your own wi-fi with a strong WPA2 password ...
1
vote
2answers
159 views
How to secure the connection between the proxy and application
I have designed a framework for my application where I have a proxy to communicate with the outside world. The connection between proxy and the application is encrypted using SSL.
But the connection ...
10
votes
1answer
486 views
Is Nokia's “institutional MITM” of SSL traffic vulnerable to CRIME attack?
It's recently been in the news that some Nokia phones proxy all traffic, including SSL connections, through a Nokia proxy. This is effectively an "institutional MITM" attack on users those phones.
...
8
votes
4answers
383 views
Can real end-to-end SSL encryption be made?
I've read the various questions tagged [ssl] and [mitm] and [proxy] and I couldn't find a duplicate.
I've got a very precise question but first I need to give some background.
Basically I'm very ...
2
votes
1answer
176 views
Burp proxy between non proxy aware device
I want to intercept traffic between a Ethernet connected device, which is not proxy aware and modify/inject javascript. Conventionally when testing webapps I would use burp.
Can burp sit on my ...
1
vote
3answers
152 views
How this kind of mechanism considered as vulnerability?
From following news, http://thehackernews.com/2012/12/etsy-for-iphone-loophole-allows.html
Someone just setup a proxy to intercept traffic between browser and https protocol, then it called ...
4
votes
2answers
95 views
Is it actually feasible or useful to use a high number of proxy servers?
In the movies, it's not uncommon to see the digitized global map projected on a huge wall with a line of light (presumably a user's connection) travelling back and forth all over the globe in a ...
1
vote
1answer
166 views
RADIUS proxy chains
RADIUS is a widely deployed remote authentication protocol. I'm looking here at its use in wireless roaming. The RADIUS protocol allows for proxies and chains of proxies:
|CLIENT|<->|Access ...
0
votes
1answer
271 views
Is it possible to spoof the last proxy of an X-Forwarded-For Header?
I'm using a firefox plugin https://addons.mozilla.org/en-US/firefox/addon/x-forwarded-for-header/ to spoof the X-Forwarded-For Header to 8.8.8.8.
For the following php page:
echo ...
1
vote
2answers
214 views
Is ProxyPass more secure than directly hosting PHP site?
Here's two possible ways,
Use Apache and PHP module to interpret a php file
Use nginx's ProxyPass with fastcgi
So, would passing the request to another server with ProxyPass more secure than a ...
0
votes
1answer
89 views
Proxy Non-HTTPS logins through EC2
I've been thinking a lot about password security these days, and have been becoming more and more hesitant to use services that have login forms that are not on HTTPS. As I was researching security, ...
3
votes
2answers
464 views
How can end-users detect malicious attempts at SSL spoofing when the network already has an authorized SSL proxy?
I'm working on one client's network where they have enabled HTTPS authority spoofing on their proxy. This allows them to effectively perform a man-in-the-middle attack to decipher all outgoing ...
2
votes
3answers
413 views
How to block the websites on client machines
In our office we are blocking sites like facebook, twitter etc.The problem is that some of the users bypass the proxy and firewalls through external sites which allow us to bypass proxy, like:
...
4
votes
4answers
451 views
How to keep secure while browsing on open wifi when SSL VPN is blocked?
After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
1
vote
2answers
445 views
Can an insecure wifi connection block users who download a lot, from say: torrents or usenet? [closed]
Can an 'insecure community network' have automated features to block internet or slow speeds on computers which download a lot, from say: torrents or usenet?
I have two computers and one has ...
3
votes
3answers
968 views
How can reverse proxies be used to bypass acceptable use policies of a company?
I am wondering how reverse proxies can be used to bypass company acceptable use policies?
What can be done to prevent it?
2
votes
1answer
231 views
Open source or common implementations for reverse proxy web application security
I realize there is already a question similar to this one, but this is somewhat of a follow-up.
I understand that a reverse proxy server by itself is hardly useful as a web app security measure ...
6
votes
3answers
776 views
SOCKS proxy security concerns
As claimed, "A socks proxy simply transfers data from a client to a server, not penetrating into this data contents (therefore it can work with HTTP, FTP, SMTP, POP3, NNTP, etc.)", I really can't buy ...
1
vote
1answer
240 views
DNS query through squid? [closed]
My IDS picked up our squid proxy server doing a dynamic DNS request. I wasn't aware squid passed DNS requests from the client to the internal DNS server. Is this possible?
Snort Alert:
ET POLICY ...
1
vote
1answer
125 views
How does http://un****-us.com/ work?
There is this site un**-us.com which supposedly allows you to bypass ISP rules such as content restriction on a particular area. Now , it is well known that routing your traffic through a web proxy ...
0
votes
2answers
285 views
Anonymous proxy over SSL [closed]
Can you name any anonymous proxy software that don't use VPN connections? Basically, I'm analyzing different encrypted traffic and now I need to analyse a simple anonymity proxy traffic. I'm analyzing ...
