The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.
18
votes
8answers
7k views
Can my company see what HTTPS sites I went to?
At work my company uses internet monitoring software (websense). I know if I visit a https ssl-encrypted site (such as https://secure.logmein.com) they can't see what I'm doing on the site since all ...
15
votes
5answers
4k views
Does using an http proxy completely hide my real IP address?
If I obscure my IP by going through a free http proxy and visit a page, will that site's admin ever be able to find out my true IP or anything related to my true connection/info?
11
votes
6answers
1k views
Anonymous web browser. Is it real?
Do anonymous browsers work? What principles do they use? Can I use them to test access to my web site? Can I detect if a visitor is using one? What is the different between traditional and anonymous ...
10
votes
6answers
305 views
Should we configure all devices to never request SSL 2.0, and reject it if offered?
In an effort to reduce man in the middle attacks, when will it be (or was it) an industry accepted practice to reject SSL 2.0 connections on the client and server side?
Is configuring this on a proxy ...
10
votes
3answers
1k views
Authenticating a Proxy server over HTTPS
When browsing to a website over HTTPS, the web browser typically does a lot of work in the background - negotiating a secure channel, validating the site's certificate, verifying the trust chain, etc. ...
10
votes
1answer
486 views
Is Nokia's “institutional MITM” of SSL traffic vulnerable to CRIME attack?
It's recently been in the news that some Nokia phones proxy all traffic, including SSL connections, through a Nokia proxy. This is effectively an "institutional MITM" attack on users those phones.
...
8
votes
3answers
568 views
How do I log all my internet-connections
How can I (maybe with a proxy, but I need names of programs!?) log all my interactions of programs with my Internet connection, so that I could see WHAT a program is sending and WHAT it is receiving. ...
8
votes
6answers
210 views
Getting credentials using proxy server
Is it possible to get the username and password we enter into sites like facebook using proxy server?
The scenario is like this :
1.My laptop is connected to a network.
2.It is configured to use a ...
8
votes
4answers
386 views
Can real end-to-end SSL encryption be made?
I've read the various questions tagged [ssl] and [mitm] and [proxy] and I couldn't find a duplicate.
I've got a very precise question but first I need to give some background.
Basically I'm very ...
8
votes
2answers
973 views
Bypassing a reverse proxy/NAT
Reverse proxies and NAT would seem to obscure a network behind such technologies to the point where it would be hard if not impossible to identify ports open and services running.
Given that many ...
8
votes
1answer
2k views
Is SOCKS secure?
In order to create a VPN, I open an SSH tunnel with a command like ssh -D 9000 user@host, and then I set my system's proxy settings to use SOCKS5 through localhost:9000. Well, setting up my home ...
6
votes
3answers
264 views
Man-in-the-middle Blue coat proxy ssl or what?
I have just discovered that my workplace have enabled some new feature in the blue coat network proxy. It seems like all https certificates in chrome on windows is being issued by this internal ...
6
votes
3answers
781 views
SOCKS proxy security concerns
As claimed, "A socks proxy simply transfers data from a client to a server, not penetrating into this data contents (therefore it can work with HTTP, FTP, SMTP, POP3, NNTP, etc.)", I really can't buy ...
6
votes
5answers
564 views
Creating tunnel with most ports closed?
How can I create a proxy tunnel from a network that has all ports but port 80 closed? I guess I'd have to bind SSH on my server to port 80, but would that introduce problems to my home network since ...
6
votes
3answers
2k views
Proxy vs. Firewall
I understand that very simply put a proxy is a sort of 'man in the middle' allowing/denying access to certain services/resources. Strictly in terms of security (I mean here privacy, parental control ...
6
votes
7answers
454 views
HTTP Proxy vs bump-in-wire
If I'm an administrator of a corporate network, I could use an HTTP proxy to examine outgoing connections to monitor what websites my employees are going to, and terminate connections based upon ...
6
votes
2answers
1k views
Is there anything like a known proxy server IP list/database?
I'm looking for something like a known proxy servers IP list (text, comma seperated or database based). Do you happen to know if anything like that exists? Free would be nice. I doubt it because these ...
5
votes
5answers
601 views
Is it possible to locate Tor/proxy users? Spam is getting on my nerves
I'm managing a huge forum (over 15k posts and 500 users) and lately some guy uses a VPN (probably) to spam my forums with topics such as:
"GAYGAYGAYGAYGAYGAYGAY"
"FRIGHT IS GAY HAHAHAHHAA"
"ADMINS ...
5
votes
5answers
738 views
Is a TOR router really safer than a proxy?
If I use a tor router to browse the regular internet that it has to leave the TOR network through an exit node. Apparently the exit node has all the information from the original user it came from on ...
5
votes
3answers
2k views
Any good free SSL proxy on windows?
I'm looking for SSL proxy capable of dumping requests.
I want to test custom browser against SSL-MITM attacks.
I'm able to re-route all traffic ongoing from browser to machine with proxy.
...
5
votes
4answers
1k views
How effective are reverse proxies as a web application security measure?
How effective are reverse proxies as a web application security device? Which types of threats do they mitigate against and which don't they?
For example are they more effective in preventing ...
5
votes
4answers
728 views
MiTM - Non-HTTP TLS
I'm doing some research into the privacy of various iOS applications. My main source of data is via wireshark or Burp (HTTP/S proxy). This has been rather sucessfull for MiTM for decrypting HTTPS ...
5
votes
1answer
2k views
How is tunnelling SSH through Poxytunnel/HTTPS different from doing it through SSL with Stunnel?
In an answer to What is the difference between SSL, TLS, and HTTPS, it's said that HTTPS is HTTP over SSL/TLS. That is, an SSL/TLS connection is established first, and then normal HTTP data is ...
5
votes
4answers
3k views
Advanced techniques for detecting a proxy/getting original IP
In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used:
Firefox with a proxy ...
4
votes
4answers
452 views
How to keep secure while browsing on open wifi when SSL VPN is blocked?
After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
4
votes
3answers
831 views
How do I check that I have a direct SSL connection to a website?
I always thought that if I had an SSL connection there would be no MITM attacks. Now it appears that isn't true (see comments in this question Is it okay from a security perspective to read foreign ...
4
votes
3answers
156 views
The safest way to circumventing Iran's Internet censorship
We usually buy services like VPN, SOCKS, Kerio [Kerio Connect?]... to circumvent Iran's Internet censorship policy.
Recently, one of the shops started selling [one of] Kerio's products, for which I do ...
4
votes
2answers
842 views
Does Java applets reveal the real IP address, even when using proxy or vpn?
Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
4
votes
2answers
95 views
Is it actually feasible or useful to use a high number of proxy servers?
In the movies, it's not uncommon to see the digitized global map projected on a huge wall with a line of light (presumably a user's connection) travelling back and forth all over the globe in a ...
4
votes
2answers
2k views
How do you properly setup Tor on Windows 7?
How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?
3
votes
3answers
969 views
How can reverse proxies be used to bypass acceptable use policies of a company?
I am wondering how reverse proxies can be used to bypass company acceptable use policies?
What can be done to prevent it?
3
votes
2answers
254 views
loadbalancer, 2 webserver, 1 webserver hacked , how to tunnel out?
lets say i have one loadbalancer (haproxy) and two webservers
one gets hacked.
is the attacker able to make outgoing connections when the webservers have no direct internet access (only ubuntu update ...
3
votes
1answer
209 views
Could somebody explain connect loop DoS?
I'm trying to understand this vulnerability.
How can I reproduce this?
3
votes
2answers
577 views
What is your approach to handling Guest Internet access?
Suppose you're a company that uses a web proxy to block objectionable content on your corporate network, and this technology may cause issues with some 3rd party VPNs. Or perhaps this 3rd party is ...
3
votes
3answers
139 views
Warn about specific CA in Firefox
Consider a setup where all HTTP/HTTPS traffic goes through a proxy. The certificate of this proxy must be trusted by all browsers (in this case, Firefox). This certificate replaces the original ...
3
votes
2answers
964 views
Is it possible to connect to a proxy with an ssl (or otherwise encrypted) connection?
What i want to know is whether it is possible to connect to a proxy with an ssl (or otherwise encrypted) connection? (I'm suspecting this is possible because TOR encrypts user connections to it's ...
3
votes
2answers
276 views
Securely expose WebService from Enterprise Network to Internet Client
(coming from stackoverflow)
Are there any standards (or certified solutions) to expose a (Web-)Service to the internet from a very security-sensitive network (e.g. Banking/Finance)?
I am not ...
3
votes
2answers
466 views
How can end-users detect malicious attempts at SSL spoofing when the network already has an authorized SSL proxy?
I'm working on one client's network where they have enabled HTTPS authority spoofing on their proxy. This allows them to effectively perform a man-in-the-middle attack to decipher all outgoing ...
2
votes
2answers
421 views
Reveal the True IP of a User
Is there any best practice method (and preferably documented) way of revealing the True IP of a user using a HTTP(S) connection?
I.e.: To be able to uncover the true IP from transparent as well as ...
2
votes
3answers
414 views
How to block the websites on client machines
In our office we are blocking sites like facebook, twitter etc.The problem is that some of the users bypass the proxy and firewalls through external sites which allow us to bypass proxy, like:
...
2
votes
2answers
515 views
Interesting article on a vulnerability found in Tor
This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
2
votes
1answer
228 views
Install my own proxy
My school network has blocked a lot of webpages, including TeamViewer, which I need. The IT department told me to find a proxy, because it was their ISP who had blocked the sites. To connect to the ...
2
votes
3answers
706 views
Protection against DDoS when using proxies
We're trying to protect some sites that are primarily located in Asia using distributed caching. These sites commonly come under DDOS attacks. We are using fail2ban, but still have two problems:
...
2
votes
1answer
232 views
Open source or common implementations for reverse proxy web application security
I realize there is already a question similar to this one, but this is somewhat of a follow-up.
I understand that a reverse proxy server by itself is hardly useful as a web app security measure ...
2
votes
1answer
99 views
How should this system be protected from ARP spoofing?
Background
My university uses an authenticated (squid) HTTP proxy server for accessing the internet.
There are a few reasons for this:
They want to track misuse of the connection
Our university ...
2
votes
1answer
141 views
Proxy server and IP address blockade
i am in china. so i use web freer to use blocked sites like face book and you tube. we use broadband connection provided by our university. some times the server goes too down and we can not use ...
2
votes
1answer
144 views
How confident is MIME blacklisting on a proxy server?
We are blacklisting a number of MIME types on our proxy server so users can't download certain file types, for example, executables.
Could it be possible that somehow, a malicious server can trick a ...
2
votes
1answer
86 views
WebProxy configuration … Which threat could apply?
I need some help to identify possible (and rational) threats that could apply to that part of IT infrastructure (WebProxy).
I have a webproxy for my users, which behave like a classic webproxy and ...
2
votes
2answers
3k views
How to force ALL programs to use my Proxy?
I have a local proxy on my PC. (localhost:8888)
But unfortunately there are many programs which are not able to go through this proxy.
So how can I force all my programs to go through my local proxy ...
2
votes
1answer
182 views
Windows Update - Interception
I'm trying to monitor the HTTP requests/responses made when performing a Windows Update.
I have a Windows 8 machine configured with a proxy in IE. I've also imported via netsh for winhttp:
netsh ...
