New answers tagged

2

Can I convert directly from a .der to a .pfx/.p12? I don't think so because Openssl uses PEM encoding for certificates by default unless you set it explicitly using -inform or -outform arguments. There is no such option listed in the pkcs12 command. Do I need a .key (not provided via http://burp/cert:8080) in order to do the conversion? You ...


0

When ZAP start the scanner is off.I take a screenshot so i can tell you the basic of ZAP. http://imgur.com/9xBebTK select the profile for scan Target to scan Here is where the scanner put the results


0

If properly configured, then yes, the IP address of the backend server would be hidden. This is the operating principle behind DDoS protection services like Cloudflare: Hide the real server behind a proxy server that can tolerate a large volume of traffic while filtering out bad requests. That said, if it's imperative that your backend server IP remains ...


0

Using a reverse proxy in web servers allows you many features. One of these is automatic data traversal to multiple servers through reverse proxies and load balancers. The server should be completely anonymous at this point. The only way the attacker could find out the proxied server is if there was a vulnerability in the framework that allows them to run ...


3

does rotating proxy increase the difficulty to find your real IP? No. Your "real IP" is either disclosed in some way, or it is not. If it is not, it does not matter how many proxies you pass through. Multiple proxies may make more difficult to track your activity, i.e. establish that actions A and B were both performed by the same entity (for that, see ...


0

On the network layer it doesn't really matter how many proxies within a chain are or how many proxies in your rotation are: Your real IP address is cascaded and should not be revealed. But as you mentioned there might be fingerprinting techniques (e.g. user-agent individualism, cookies) or other leakages (e.g. announcing source addresses in SMTP and HTTP ...


1

You need to use a RDP reverse proxy, not just a TCP proxy. There are plenty of software providing that functionality (in different forms), free and paid.


3

Anything that went over HTTP through a proxy was available to proxy controller. HTTPS you should be okay, depending on the CAs that your browser trusts and assuming that you didn't click "yes" on trusting an untrusted certificate.


3

My guess is that your proxy administrator has turned off ssl-inspection for google domains because of an update of Chrome, and what ciphersuites it will attempt to use for google domains. https://forums.bluecoat.com/forum/security-policy-enforcement-center/proxysg/37493-proxysg-is-offering-unknown-elliptic-curves-chrome-google-connect-failure Unfortunately,...


2

Your question of why the forward rule doesn't work is essentially a networking question, so I'll explain using an analogy. Imagine there are three people involved in the sending of a letter - Alice, Bob, and you. Alice wants to get a message to Bob, but using you as a middleman (proxy). Alice could use one of two techniques: Method 1: Write a letter ...


1

I've had good success with the following Android proxifiers: ProxyDroid Postern ProxyDroid has one draw-back; your phone must be rooted. To the best of my knowledge Postern will work on an un-rooted phone.



Top 50 recent answers are included