The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

learn more… | top users | synonyms

0
votes
3answers
95 views

Data exposed through campus proxy

I want to connect with Firefox to my university campus proxy, in order to access subscribed research journals, but first I need to know, which of the transmitted data through the network are visible ...
0
votes
0answers
37 views

Bypass Network using Facebook [closed]

All ip addresses have been blocked at my work place apart from Facebook. Can I use Facebook as a proxy to access other blocked sites? Thanks.
3
votes
1answer
46 views

Why use a proxy to hide OAuth client credentials in password grant calls?

In a November 2014 article by Alex Bilbie, OAuth users were advised against making the client send its credentials (client_id and client_secret) when performing Resource Owner Password grant calls. ...
3
votes
1answer
40 views

Is intercepted ssh-socks traffic revealing HTTP object count and sizes?

I read an article titled the network is hostile, in which the following is stated: Traffic analysis remains a particular problem: even knowing the size of the files requested by a TLS-protected ...
3
votes
2answers
91 views

Would a VPN with changing configs do the same job as different VMs

I was reading this question. So my question: Would using a VPN and swapping out configuration files that change your IP address mask the same as using different VMs?
3
votes
1answer
159 views

Rogue WPAD server attack

Today I encountered something I have certainly not seen before first hand. Our IDS blocked some outbound traffic attempts from 5 servers with no WAN access. This traffic was leading to an inactive ...
3
votes
1answer
271 views

How can I intercept XMPP traffic on Android? [closed]

I have been learning about security testing on Android apps, and to intercept traffic I was using Burp Suite. I know it works perfectly for HTTP/HTTPS traffic, but most of the messenger apps are using ...
0
votes
5answers
2k views

How to send HTTPrequest anonymously [closed]

I want to send a HTTPrequest to a specific web address, but with different IP address. For example, if a webserver detect IP address, then add it to a database. If another request come from a IP, ...
1
vote
3answers
158 views

What is the simplest way for a Proxy/UTM to block HTTPS traffic using URL filtering?

I'm building a UTM using ubuntu, How can I block HTTPS traffic using URL filtering? (For example I want to block https://facebook.com) I'm using Squid as a transparent proxy server. Solutions I don't ...
4
votes
3answers
125 views

proxy servers and restricted work computers

I have a work-issued computer that I have limited access to the Internet due to the security protocols in place on the device. I want to use this machine at home, for work. I want to be able to hide ...
6
votes
4answers
190 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
1
vote
1answer
93 views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to ...
0
votes
0answers
14 views

Bluecoat sc-filter-result: DENIED but s-action: ALLOWED [migrated]

I have a bluecoat server which sometimes creates rows which don't make sense: { ... "sc-filter-result": "DENIED", "s-action": "ALLOWED" } How is it possible to be both DENIED and ALLOWED?
4
votes
1answer
80 views

What kind of attacks can target static resources?

Static resources and their caching interests me from the security perspective. Let's say we have an .jpg file requisted from the origin -> going through a reverse proxy with caching -> reaching the ...
2
votes
3answers
167 views

MITM on program with no proxy settings

I'm trying to inspect the traffic of a program (which is running on my computer) that uses SSL over TCP to a non-standard port. The traffic may or may not be HTTP traffic, likely isn't. Neither ...
0
votes
2answers
473 views

How to post comments on websites without being traced back

Just trying to get some general sense about the security on internet now-a-days. There are so many websites I go and comment on different things. If some comments are political and they don't like, I ...
3
votes
1answer
88 views

How should certificates be shared between a proxy and a frontend?

At work, I've been asked to look into creating a reference topology for a WebSocket chat application, which includes a proxy between the web-facing frontend server and the backend. At the moment, I am ...
4
votes
1answer
113 views

Is it possible to trace a backend through a reverse proxy?

I'm creating a reference network topology for a WebSocket chat application at work, and I'd like to have something clarified for my own understanding. The current topology involves a reverse proxy ...
4
votes
3answers
10k views

How do you properly setup Tor on Windows 7?

How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?
1
vote
1answer
73 views

Can Web Proxy Autodiscovery leak HTTPS URLs?

The WPAD protocol can in some circumstances allow an attacker to get clients to use a malicious PAC script. It appears to be well documented, that this can be used to perform MITM-attacks on HTTP ...
2
votes
3answers
83 views

How secure is socks5 proxy over ssh?

At work we are all using Windows 7+, with full administrative privileges. Each PC has a dedicated IP and a proxy is used. It is set as a HTTP proxy and the option to use this for all types of ...
2
votes
2answers
4k views

Proxy / VPN Quality Check / Detection

Is there any way to build a script which detects or rates proxies like Maxmind's proxy detection software? I have already tried to use this code, but it doesn't detect all proxies, in fact it detect ...
1
vote
0answers
113 views

Logging all traffic crossing SSH proxy

Is there a way to log SSH sessions proxied through a machine (User-> SSH Proxy -> Server (with SSH)) without modifying the SSH daemon on the proxy? I need to log all the commands as well as responses ...
2
votes
4answers
145 views

SSL encryption process and its security

I know the basics of SSL encryption and how certificates work, but there are some points that are not clear to me regarding the SSL security: If there is a intercepting proxy between the web server ...
1
vote
1answer
40 views

Reverse Proxy SSL container

Technically and security wise, can a reverse proxy act as a "container" for SSL certs ? Meaning, for example currently my web server is running on ssl (https). Can I move the SSL cert to the reverse ...
1
vote
2answers
73 views

Charles Proxy can not capture message sent over SSL connection [closed]

I have setup Charles Proxy app and it can captures my https request/response sent through browser. Now instead of using the browser, i have an app that setup a SSL connection to the server, and then ...
0
votes
1answer
46 views

detecting proxy [duplicate]

say u host a website and people come and place orders with you while your away, u come back and see the orders have been placed by somebody, how will you find out if the person who placed the order ...
9
votes
5answers
8k views

Is a Tor router really safer than a proxy?

If I use a Tor router to browse the regular internet that it has to leave the Tor network through an exit node. Apparently the exit node has all the information from the original user it came from on ...
0
votes
2answers
66 views

Protect SSL connections from MITM for users with modified clients

I'm working on a web app that uses SSL. I'm afraid that some people might access the app via a network that uses a proxy to intersect and inspect the SSL traffic [MITM]. Some people might access the ...
2
votes
2answers
1k views

Windows Update - Interception

I'm trying to monitor the HTTP requests/responses made when performing a Windows Update. I have a Windows 8 machine configured with a proxy in IE. I've also imported via netsh for winhttp: netsh ...
1
vote
3answers
556 views

Install my own proxy

My school network has blocked a lot of webpages, including TeamViewer, which I need. The IT department told me to find a proxy, because it was their ISP who had blocked the sites. To connect to the ...
2
votes
2answers
112 views

Is a reverse proxy worth it?

Is a reverse proxy worth it? There are so many unsecured sites using a reverse proxy and I feel like that doesn't protect them. After all if they have an error in their SQL that could be use for ...
6
votes
3answers
4k views

Man-in-the-middle Blue coat proxy ssl or what?

I have just discovered that my workplace have enabled some new feature in the blue coat network proxy. It seems like all https certificates in chrome on windows is being issued by this internal ...
8
votes
7answers
6k views

Does a chain of proxies (e.g. one connecting to another and another and so on) make tracing the original IP harder/impossible?

I see nobody here has asked this question. What if one, instead of just using a single proxy, connected a proxy-to-proxy in a very long chain and downloaded something (illegal) using secure packets ...
4
votes
1answer
2k views

HTTP Reverse Proxy: Correct way to do SSL to backend

If I have a HTTP reverse proxy that communicates with it's backends in an untrusted datacenter, or across datacenters, I would want to use HTTPS in the backend, as talked about here: Reverse Proxy ...
1
vote
1answer
71 views

Does a TLS-connection to a proxy-server encrypt the destination url's?

If I use a browser through a proxy-server over a secure connection (i.e. the proxy is HTTPS) - does that mean that everything is encrypted, or just the page returned from the site? And who does the ...
3
votes
2answers
243 views

How does my browser detect my location, even via proxy?

How does my browser detect my location even via proxy? I have tried this code via VPN and got the same result as without it. According to the specification my browser should detect it from: ...
2
votes
1answer
154 views

SSL Decryption why is the root CA certificate required on clients?

Maybe a quick question. We have Palo Alto's that perform SSL Decryption using a sub CA certificate issued by our internal Root CA. This is working for our internal windows domain computers as the root ...
2
votes
1answer
153 views

Safety of exposing an internal web application to the internet using a reverse proxy in the DMZ

I am creating a web application which needs to make direct connections to internal resources (e.g. database servers), but will also need to be accessed from the internet. The web app exposes web ...
0
votes
1answer
104 views

configuring burp to use in proxy environment

my university internet connection runs behind proxy.its host name is 192.168.1.103 and port no is 3128.how to configure proxy in burp suite if i should enter above proxy setting in my firefox browser. ...
7
votes
1answer
383 views

What Steps Does An Anonymous Artist Need To Take to Retain Anonymity? [closed]

I read these questions which had great information: How can I keep my identity anonymous as a website owner/administrator? and How much can I trust Tor?, however I wonder if this is too extreme for my ...
0
votes
1answer
38 views

In What Ways Can X-Foward-For Header Information Be Used In An Attack

By enabling X-Foward-For on our proxy, we would essentially be advertising our internal IP addresses externally. However, we use a private range. Everything goes through NAT. So, the best anyone would ...
1
vote
1answer
72 views

How to fully mask my computer without using tor? [closed]

I want to mask myself and therefore I configured a proxy server. I use debian and squid 2.7. It actually works fine, however, I visited the site whatismyip.com and I can still see that I'm accessing ...
1
vote
1answer
338 views

Has anyone used this ICLOAK USB device? [closed]

Does anyone know about this ICLOAK USB device? Opinions or how well they work? I'm looking for a security solution when I'm using PCs where I work. Occasionally we have to log into to web sites, ...
2
votes
1answer
92 views

ettercap use as local proxy [closed]

Hi everibody and sorry for my english, I'm looking for a way to use ettercap (or another program) to alter TCP traffic (coming from local) on the fly. I used "netsed" with iptables, but netsed is too ...
1
vote
1answer
52 views

SSL Test Server with typicals Flaws [closed]

i am testing different SSL-Proxys and want to know more about their failure-handling. Do you know about an public (test)server (HTTPS) which provides the typical flaws like: Expired certificate ...
-2
votes
1answer
76 views

Official proof (document) that Linux is safer and faster than Windows [closed]

I work for the Mexican government, and even though everyone involved in Linux knows that it is safer and runs faster in most instances, I have not found an official document or authority that I can ...
1
vote
3answers
1k views

How to intercept and analyze mobile SSL application traffic?

What is the best way to analyze requests sent by a mobile application over SSL? The communication protocol is not necessarily HTTP/S so intercepting them with BURP/ZAP/Fiddler or any other HTTP proxy ...
0
votes
1answer
58 views

Decrypting SSL within Multiple Products

I've read the various questions tagged [ssl] and [mitm] and [proxy] and I couldn't find a duplicate. I cannot find any documentation on this subject online. All of the traffic is currently flowing ...
2
votes
2answers
1k views

Squid proxy and VPN software

I have some questions about squid proxies, we set a squid proxy server to block certain web sites for users. and some users only can access one website that related to our work.but after install some ...