0

Is there any way to detect injection into unencrypted http traffic, like files, js etc.

  1. just by traffic analysis
  2. from the client-side?
Improve this question
1
  • Maybe you could check the OONI Probe, it may help to analyse your traffic ooni.org/nettest/#boxes (Open Observatory of Network Interference)
    – Kaleidoscalp
    Commented Oct 24, 2022 at 21:00

1 Answer 1

Reset to default
1

a) If by "just ..." you mean without any extra flags, clues, etc. from on each side of an HTTP connection, or knowing their history, ordinary traffic and normal behavior, the answer is No.

b) Yes & No! It depends.

No, if it's ordinary innocent traffic without any additional clues to help one party (the client, in your case) check out if something has already been stuffed into the traffic, or it's been tampered with.

Yes, If some extra [hidden] meta data (like a checksum with customized algorithm) has been added so it can be used on the other side of the deal or en route, to verify the integrity of the whole thing, e.g. using piece of javascript code on the page or manual inspection.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .