Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [proxy]

The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

Filter by
Sorted by
Tagged with
0 votes
0 answers
20 views

Can Proxy replace VPN? [duplicate]

I was reading about proxy vs VPN, to summaries that one could say that VPN is similar to proxy with the addition of encryption for better security. So I have a question, wouldn't it be better to use ...
user avatar
  • 1
0 votes
0 answers
10 views

Chain apache web server acting like reverse proxys using proxychains

I've configure multiple apache web servers so they filter the request and if they have a specific request_uri the request would be redirect to a c2 server. I do that with the next line in the apache ...
user avatar
  • 5
0 votes
0 answers
15 views

ProxyPassMatch redirect to the same request uri

I am doing a reverse proxy with apache to redirect https traffic filtering by the uri request. Right now I have the next ProxyPassMatch "^/thisisthepath$" "https:192.168.1.40/...
user avatar
  • 5
3 votes
1 answer
71 views

REST API behind proxy, is TLS sufficient?

I have the following problem: A service provides a REST API. Different kinds of clients (desktop applications, mobile applications, web applications) connect to this API and send and receive data. In ...
user avatar
0 votes
0 answers
7 views

Why is Chrome connecting to wpad:80 and why is the connection hanging so long? [migrated]

I am using Socks5 using with proxifire v3.21 When I open Chrome, there are some wpad connections in proxifire with connecting status like below : What are these connections? They cause one minute ...
user avatar
0 votes
0 answers
19 views

Which is more secure and better practice? Setting up a reverse proxy on backend with localhost or on a separate VM and route to other VMs/services?

I wanna know if it's better in terms of security, availability and best practice to set up a nginx reverse proxy on my backend and use it with localhost or to set up a VM that handles everything for ...
user avatar
0 votes
0 answers
6 views

Redirect to other ip but the same query whit Apache mod_rewrite [migrated]

I have to redirect the request that a Apache web server receives, using the user_agent to filter. The idea is that if the user_agent is "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_2_1) AppleWebKit/...
user avatar
  • 5
0 votes
1 answer
30 views

apache mod_write RewriteCond %{HTTP_USER_AGENT} Doesn't works

I am trying to redirecto to other machine by filtering the user agent in a apache web server. I have a web server in the machine with the ip 192.168.2.11, but this web server only should send the page ...
user avatar
  • 5
1 vote
1 answer
29 views

Passing traffic from a script through proxy / tor network [closed]

I am applying for a job that involves creating unit tests and end to end tests for a website. Right now, i am assigned with a task, in order to test my skills. However, my country has blocked access ...
user avatar
7 votes
3 answers
315 views

Is it possible for a website to detect the presence of a proxy?

I am attempting to scrape a site which is notoriously difficult to scrape. Access from datacentres is generally blocked. In the past I've used various proxies, but recently these have stopped ...
user avatar
-1 votes
0 answers
13 views

Limiting Mobile Fingerprints For Google?

I run a small agency managing numerous Google accounts and am trying to determine the best route for managing/hiding fingerprints on mobile from Google, outside of good dedicated proxies (which I ...
user avatar
0 votes
0 answers
26 views

Intercept API calls of powershell module

I am looking at a way to intercept the API call made by the AzureAD powershell module. Wireshark is not able to decrypt the TLS packets sent and I'd also like to work with the HTTP requests rather ...
user avatar
1 vote
1 answer
75 views

How secure and anonymous is the --tor parameter in Sqlmap?

How secure and anonymous is the --tor parameter in Sqlmap? Does it really send every request over Tor and does it have any IP/DNS/STUN requests leak loopholes?
user avatar
1 vote
1 answer
74 views

What can evil HTTP proxy do, when using HTTPS?

I am connecting to a HTTPS service with SSL through a HTTP (not HTTPS) proxy. I am using Chrome/Firefox proxy settings. (Chrome does not directly expose them, but it can be set via chrome extension or ...
user avatar
0 votes
0 answers
67 views

Is it possible that data is still encrypted even when you intercept TLS? [duplicate]

I've recently set up a mitmproxy on my phone and it seems to work fine. It intercepts that request for https websites and I can view their content. But I'm trying to intercept data from a banking app ...
user avatar
  • 1
1 vote
1 answer
57 views

Android- ads in applications are in local language even when using proxy

I have noticed some weird behavior on my smartphone that I can't explain myself. I'm using Orbot application as proxy to route all of the phone's internet traffic through the Tor network. When I ...
user avatar
6 votes
0 answers
137 views

Why am seeing all these Chinese proxy domains? [closed]

Through a casual Google search I came to this Stack Overflow result. I clicked it absent-mindedly, could not connect through the server and saw that he domain was some Chinese government proxy server. ...
user avatar
  • 161
0 votes
1 answer
56 views

Does such kind of privacy proxy exist?

Imagine a typical web service. A client accesses it through a load balancer, which forwards the request to a backend server which will fetch data from a database, create the result and send it back to ...
user avatar
  • 61
0 votes
1 answer
37 views

Collect traffic from mobile app to IoT device

I have a mobile app that connects to a IoT device over port 8888 to send commands. I'm not sure how to intercept this. MITMproxy was not able to capture the data as the app would not load behind a ...
user avatar
2 votes
2 answers
129 views

Before Tor, VPNs and proxy services, how did cybercrimals remain anonymous?

I have read that they used previously breached machines, but to try to gain access to those machines they also needed some kind of protection right? How did they do it then?
user avatar
  • 21
0 votes
1 answer
33 views

TLS session tickets between proxy and upstreams

I'm planning to implement (nginx) ssl_session_tickets in addition to ssl_session_cache between a proxy and upstream. They're not located in the same DC so TLS must be in place. My questions are : 1) ...
user avatar
0 votes
1 answer
97 views

iCloud Private Relay MITM Defense?

When it comes to defending against MITM attacks while using public Wifi, is the security offered by iCloud Private Relay comparable to using a VPN? Edit: My motivation for asking the question comes ...
user avatar
  • 2,242
0 votes
0 answers
318 views

How some mobile apps prevent http traffic from being intercepted through a proxy like BurpSuite?

I noticed more and more times that some mobile apps are able to block requests, and they don't forward those requests to the server if they're going to be intercepted with a proxy like BurpSuite. This ...
user avatar
  • 54
1 vote
1 answer
158 views

Modifying UserAgent by a proxy?

For learning and testing purposes I'd like to change the UserAgent in the HTTP header. In the desktop Firefox it is simple: there is an add-on for this task. But on android... it is impossible. I ...
user avatar
2 votes
4 answers
186 views

How would you assess the added value of web security gateways/proxies in days of > 90% of all traffic encrypted?

As of today, web security gateways add a layer of complexity to corporate web traffic while - in my opinion - only adding a small layer of protection, as most web traffic is encrypted nowadays. Of ...
user avatar
  • 23
0 votes
1 answer
182 views

SNI leakage prevention with proxy

In TLS 1.2 / HTTP(S) context, plaintext target hostname could potentially leak in 3 different ways: In DNS query prior to TCP/TLS/HTTP connection. In TLS handshake, ClientHello message, in SNI ...
user avatar
1 vote
0 answers
19 views

Suspicious HEAD http requests [duplicate]

On my Windows 10 machine, I run mitmproxy on localhost:8080. I've changed the system proxy setting to point to my local proxy server. Apart from what I expect to see, I can also see the following HEAD ...
user avatar
2 votes
2 answers
249 views

Why are I and other users of my ISP being used as a proxy server?

I recently noticed a huge amount of downloads made through my IP (iknowwhatyoudownload.com). On the website abuseipdb.com, I discovered some reports of abusive behavior. So I started an investigation ...
user avatar
1 vote
1 answer
309 views

Does a http proxy (ziproxy/squid) encrypt communication between client and server

I've read a lot of similar questions, with long answer, and they are making me confused, so for a quick yes/no question. If I, access a https webpage via an http proxy (my own proxy) (like ziproxy/...
user avatar
  • 115
-1 votes
1 answer
150 views

IP hiding attempts are detected [closed]

So I am using Tor and I try to log into a certain web site. It gives me a message saying that my IP address was used for spamming and does not let me log in. I think ok, probably the exit node is ...
user avatar
0 votes
1 answer
402 views

Javascript injection bettercap2 over HTTPS

I use bettercap2 http proxy and arp spoof to inject one-line js alert into http pages. It works fine, however what about https? I couldn’t find any working method to inject it without the browser’s ...
user avatar
0 votes
1 answer
241 views

What are the risks when using proxy such as Fiddler

I would like to understand a point. When I use fiddler it creates a local proxy to analyze the traffic, so far everything is fine. However when Fiddler is launched and I browse an HTTPS site the ...
user avatar
0 votes
1 answer
89 views

Reverse-proxy issues

I am trying to create a reverse-proxy web application using Flask. I don't really know weather to call it reverse-proxy or not but my idea is that the web app gets a URL from ../proxy/<URL>, ...
user avatar
  • 101
0 votes
0 answers
118 views

SSH Tunnel HTTP Security

I think I have this set up right, but I'd appreciate a sanity-check and any info on best practices that I should be using for creating SSH tunnels to my home network while traveling. Home network: ...
user avatar
0 votes
1 answer
77 views

Online platform control (proxy)

To connect to the online platform of the company I work for, I have to use a proxy. Is it possible for the person responsible for this platform to check if I am currently using other programs in ...
user avatar
0 votes
1 answer
138 views

my ip address comes out from a different ISP/Country

I noticed suddenly something weird on my PC. I am currently in Italy, Google all of a sudden is displayed in Arabic, and my IP is from an ISP in Czech Republic, and it is obviously different from the ...
user avatar
0 votes
1 answer
126 views

Encryption with Tomcat & Nginx reverse proxy

I'm working with Tomcat and nginx as a reverse proxy and I'm trying to have a better understanding of how the traffic flows and of what the security issues are. Picture this as what I have in mind: ...
user avatar
0 votes
1 answer
144 views

How reverse proxy works?

I know that forward proxy can enhance security by replacing client IP's address with proxy server IP address. So, the web server or anyone else cannot identify the client identity who's requesting a ...
user avatar
0 votes
2 answers
527 views

Explicit vs transparent proxy

As far as I have understood it: An explicit proxy challenges the user/application within his session. NGFW (transparent proxy) and SSO/identity-based solutions are just letting everything pass that ...
user avatar
  • 137
1 vote
1 answer
222 views

Can a machine running a packet sniffer see what nginx is forwarding on localhost to a Flask app?

I want to serve a Flask application from my pc. Other machines in my network only should be able to consume the API. However, I wish to have the communication between the other machines and the API ...
user avatar
2 votes
1 answer
151 views

Whats the point in setting up an open proxy?

Decided to have a look at a list of "open" proxies. I've noticed that a good deal of these proxies are on residential IPs. One of the IPs, 68.188.59.198, is owned by Charter Communications ...
user avatar
  • 103
1 vote
1 answer
135 views

Can wifi network administrators see if you are using a proxy?

A friend of mine wants to use a Proxy on his home computer because his parents have blocked many games and social media services. My question is, if he is using a Proxy, will his parents be able to ...
user avatar
-1 votes
1 answer
159 views

Preventing MITM Attack with Squid

There are two options, what is the best approach? I want to either Create a squid proxy server that detects MITM attacks or Create a python UI application to detect differences between local ...
user avatar
  • 442
0 votes
1 answer
317 views

Can't free proxies be used to create a botnet?

I recently learned that there are plenty of services on the internet that offer/list free public proxies (freeproxylists.net, hidemyass.com, proxyscrape.com to name a few). Is this safe? Can't an ...
user avatar
  • 47
1 vote
1 answer
145 views

Is it possible to completely obfuscate proxy servers?

Stripe's fraud detection documentation claims it has Proxy Detection When I search for how it might be detecting traffic from proxies, I see this great answer, which show how to detect that traffic. ...
user avatar
  • 1,224
1 vote
0 answers
107 views

Certificate Checking for MITM w/ Squid

I have already set up a squid cache proxy server on a Raspberry Pi 4. I need to create some sort of GUI to turn on and off certificate checking for man in the middle attacks. First, how do I get squid ...
user avatar
  • 442
1 vote
1 answer
206 views

Can I trust public socks4 proxy when using only HTTPS?

I am using a socks4 public proxy for more speed/bandwidth. I am currently using it for downloading file. Now I want to use it for social media or daily day usage. I know that they will get my all ...
user avatar
1 vote
1 answer
128 views

SSL Termination within corporate network

I know its is advised to encrypt the traffic within the company network. Should we also stay away from SSL termination after a reverse proxy that's proxies multiple worker nodes on the same LAN? By ...
user avatar
  • 115
1 vote
0 answers
295 views

SAML/oauth2/openid-connect login via proxy as another user

I manage a set of service providers (SP1, SP2, SP3, etc), and we currently have this SAML SSO flow working where the SP causes a POST submit to the SAML IDP with an XML SAML request which includes an ...
user avatar
  • 111
0 votes
2 answers
234 views

Hiding client IP from a VPN server

VPNs can often be useful for obscuring personably identifying information (IP, geolocation, etc.) from remote destination servers. Traffic is routed through a VPN server and forwarded to the ...
user avatar
  • 1,649

1
2 3 4 5
14