Questions tagged [proxy]

The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

Filter by
Sorted by
Tagged with
0
votes
0answers
46 views

Page keep loading in BurpSuite

I have literally tried everything. Set my proxies to 127.0.0.1 with 8080 port Installed certificate set hijacking proxies to True in Firefox Reset Burp Suite settings to default Other browsers Is ...
0
votes
1answer
78 views

Remote working. Is my employer able to monitor my activity

Due to situation, my employer made a work-from-home policy. And remote administration tool is not installed, since I did clean installation of the system. Is my employer able to see my activity? ...
0
votes
0answers
50 views

Firefox bypass proxy for some addresses - why?

I'm using the latest firefox on a ubuntu 18.04 OS. Today I noticed some outgoing connection which are bypassing my proxy server. For example: $ netstat -tpun tcp 0 0 my-local-ip:44214 ...
0
votes
2answers
83 views

Is it safe to have an opened port on my PC with a proxy server listening?

I have a single port open for my own proxy server. All other ports are closed. Is it safe for my PC? Even if my port will keep getting bombed by hackers could my PC be exposed to them? There is no ...
0
votes
0answers
41 views

How to use Burp Suite together with The BodgeIt Store?

The BodgeIt Store is a vulnerable web application for studying web development security. It can be downloaded from the internet and installed locally on your computer as a docket container. This web ...
1
vote
1answer
67 views

How to display HTTPS contents [Using Proxy]

I'm a beginner at proxy traffic stuff and I'm struggling here with Charles Proxy I'm trying to 'intercept traffic'. I have an HTTPS page and I want to display the data from the content (inside ...
-1
votes
1answer
70 views

Stop VPN access from wifi router

Is it possible to stop VPN access for all devices when you are the administrator of the wireless connection?
0
votes
0answers
55 views

Remotely poisoning Cloudflare's cache servers by James Kettle's Web Cache Poisoning Attack?

I am recently exploring and playing with James Kettle's Practical Web Cache Poisoning attack. The last part of his post mentioned that Cross-Cloud Poisoning is possible, however, I can't find a way to ...
0
votes
1answer
56 views

Is it possible to remote forward tcp through a free proxy

I’m aware you can forward connection from a proxy server like this: ssh -R 8080:localhost:80 public.example.com But I’m curious if it’s possible to forward from a free proxy such as: https://free-...
1
vote
3answers
142 views

Is it possible to scan the whole IP range to find a domain behind the CDN?

I am very curious if it is possible to find the real IP address of a domain "protected" by a CDN service. For example, www.cnn.com uses Fastly service, and the domain name only resolves to a Fastly ...
3
votes
3answers
334 views

Does Tor still hide all tracks?

I've seen some threads on Reddit that say true hackers, when attacking, go through a public WiFi network, use a VM, proxy through a zombie computer, use a VPN, then proxychain through Tor, use another ...
0
votes
0answers
66 views

Charles Proxy intercepting SSL Pinning enabled traffic

An Android application that has SSL Pinning was successfully tested on a mobile device running Android 6 (with the certificates installed) using Burp proxy and OWASP ZAP Proxy. As expected the ...
0
votes
0answers
66 views

How can I proxy traffic of macOS Mojave APPS using Burp Suite?

If I do a web search for proxying macOS apps using Burp Suite, I don't get any useful info. Instead, I get dozens of results talking about how to proxy iOS or Android apps. I am talking about desktop ...
1
vote
1answer
87 views

Pfsense security issues?

I have used pfsense before as the main gateway, load balancer, traffic shaping, proxy, firewall, virus/malware protection, enterprise wifi solution for an entire office of 50+ users. Yet I have ...
1
vote
1answer
87 views

Local Burp Proxy not showing routed packets

I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62. I am trying to route my all packets from my wlp2s0 interface to burp proxy which running on 8080 and I also ...
2
votes
1answer
84 views

Is it possible to be infected with malware/virus via a proxy?

I'm curious as to whether you can be infected with malware by using a proxy? I currently process data using Python but occasionally I encounter recaptcha, so I'm looking to implement proxy support. ...
-1
votes
1answer
81 views

What is the difference between browser based VPN and desktop VPN by anonymity point of view?

For example : Nordvpn provides both chrome extension and its desktop software. Opera provides a free browser vpn, etc.. Some people says the browser extensions may leak dns but i never had an ...
1
vote
1answer
138 views

How does proxychains avoid DNS leaks?

Also directly related, how are the DNS servers queried when using proxychains? Assume I'm using Tor for proxychains. If I uncomment the DNS part of proxychains.conf, my requests supposedly get sent ...
0
votes
2answers
74 views

Is there anything I can do past SSL pinning to secure my connection? [closed]

My goal is to prevent man-in-the-middle (MITM) attacks through proxies. I've implemented SSL pinning, which has helped significantly, but I'm wondering if there's anything more I can do that's worth ...
-2
votes
1answer
63 views

What part of this request can be logged? [closed]

While testing a website i noticed a weird behaviour. When resetting the password a POST request with empty body is generated. The request is the following: POST /reset/token/[token]/passwhord-hash ...
1
vote
1answer
80 views

Questions about SOCKS5 security

I'm planning to start a distributed crawler in order to avoid common limitations imposed by servers/CDN like rate limit, region filter, and others. My idea is to have a central server and multiple ...
0
votes
1answer
42 views

Can the ISP see the path of a SOCKS proxy chain

While I was reading an article about proxy chaining https://resources.infosecinstitute.com/proxy-chaining/ I've stumbled upon this paragraph Even if you use proxy chaining you can’t be 100% ...
0
votes
1answer
305 views

How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I've pentested a lot of websites and a few apps too but this app eludes them all. On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
0
votes
2answers
86 views

Is it possible to attack the main server through a reverse proxy server that only serves as a url rewrite?

I have a content site https://www.mysite.com I'm asking a client to configure a reverse proxy server connection in their server so everything inside the subdirectory 'external-content' gets pulled ...
1
vote
1answer
98 views

Using mitmproxy to analyze mobile application and iOS network data

I followed a guide where the author connected Windows PC and iPhone to his home WiFi network. He installed mitmproxy and ran mitmweb.exe on PC. On iPhone he went to wifi settings and set a manual ...
0
votes
1answer
109 views

Phishing urls from shnpoc.net/McAfee?

I was looking into my websites traffic and found few entries from a subdomain for shnpoc.net domain. And when I looked into it, it was transparent proxying my website. On checking further, I found ...
2
votes
1answer
79 views

Is there any way to keep the request in intercepting proxy for atleast a min before application says check your connection?

I just bypassed SSL pinning on an android application but the problem is application won't let me play with the request on my intercepting proxy. It says something like problem with your network or ...
2
votes
0answers
62 views

Effective ways to hide your IP address and Device Information from apps on Mobile? [closed]

How can you make sure site admins are not able to get information like your IP, Browser, Device, etc?
1
vote
1answer
82 views

Protect admin page using proxy

I want to protect my admin page not only with a login and password, but also with IP filtering as described here: https://security.stackexchange.com/a/30649/68841 But I have two questions: Can I use ...
0
votes
1answer
163 views

Advantages of http CONNECT method over TLS

I wonder what the advantages of http CONNECT request over TLS are. I understand that the CONNECT request data from client to proxy is encrypted. But I want to know more specific advantages. Which ...
1
vote
2answers
284 views

Is it possible to tunnel my whole linux machine through http proxy? [closed]

For some reason i access my internet through a HTTP proxy. Is there a way to tunnel my whole Linux machine (currently am using ubuntu 18.04) through http proxy. If i change proxy setting in the ...
0
votes
0answers
54 views

Reverse proxy <=> server encryption needed? [duplicate]

We are developing a .NET Core app and we are running it behind reverse proxy (Traefik). Currently, we have 3 instances of .NET Core application running. Infrastructure schema looks something like this:...
41
votes
4answers
6k views

What benefits are there to blocking most search engines?

While on a client's site using the corporate network, I see that only a few search engines are allowed. Google and Bing, possibly others; while my fav DuckDuckGo is blocked, and a few others that I'...
1
vote
1answer
72 views

If I use a VPN, can an enterprise proxy insert itself in the middle?

I'm using the guest Wi-Fi at a large corporation, and connecting to a commercial VPN provider via the OpenVPN client. I do not know one way or another if a proxy is used on the guest wi-fi, but I ...
1
vote
3answers
174 views

TLS and reverse proxies

Hypothetically speaking, let's say I purchase the domain eve-mail.com and get a cert via LetsEncrypt. I then use a reverse proxy to point to the reputable and widely used alice-mail.com. Connecting ...
1
vote
2answers
601 views

SSL handshake not visible in Wireshark

In my organization we have a cloud proxy that work on a loopback address. The vendor of this proxy has deployed an app on our machine which listens on the loopback address. I have captured the apps ...
2
votes
1answer
120 views

SSL MITM Proxy Security - Can we rely on it?

In my organization, we have an SSL MITM (Man-in-the-middle) proxy (like ZScaler proxy). If I browse an HTTPS website and check the certificate, I can see that the proxy has issued a separate ...
3
votes
1answer
431 views

How to verify my connection is not going through MITM proxy?

I realized the issue a MITM proxy can pose to my privacy and I started to dig into it more to see how to detect it as a client. Things I know to check so far are: Checking who issues the certificate ...
1
vote
0answers
72 views

Securing a SOCKS5 to SSH Tunnel on Windows

In order to gain web access from the perspective of a remote device, it is very common to use the SOCKS5 to SSH Tunnel capability built into OpenSSH Client and Putty (detailed here). Both clients ...
2
votes
1answer
57 views

Is it possible to detect the application level protocol in a TLS tunnel without interception?

Consider a proxy that doesn't intercept TLS, but allows CONNECT tunnelling, but only to limited ports (eg: 443 only). If someone runs an ssh server on port 443 and connects to it using CONNECT, would ...
-2
votes
1answer
68 views

How to “see” all the traffic that leaves my network [closed]

Here is my setup: Cable Modem >> ASA 5505 >>> LAN I want to be able to see all the traffic that leaves the network such as what websites are being visited, IP connections made, etc. I would like to ...
0
votes
1answer
113 views

A Proxy that encrypts your data is the same thing as a VPN?

I have heard that a VPN encrypts your data but a proxy doesn't. So a proxy that encrypts your data is the same thing as a VPN?
1
vote
1answer
61 views

Reverse proxy isolation from insecure blog, are sessions vulnerable?

Hi I have a WebApp where security is important. E.g. www.somewebapp.com The app has a wordpress blog (hence not secure since wordpress). e.g. www.somewebapp.com/blog To protect the webapp from ...
0
votes
1answer
302 views

WPAD (badWPAD vulnerability) should I disable or not?

Hi I have read recently very bad things about WPAD vulnerability for example here nakedsecurity.sophos.com/2016/05/25/when-domain-names-attack-the-wpad-name-collision-vulnerability/ (article from ...
1
vote
0answers
171 views

mitmproxy request URL redirection does not work

I need to redirect the user's request in such a way when a user enters: https://a.com the mitmproxy redirect it to: https://www.newsite.com/?somepage From a previous post, I found this script in the ...
3
votes
2answers
794 views

Not able to intercept traffic from nike.com login request

I'm using BurpSuite to intercept the HTTP/HTTPS requests sent when logging in on https://www.nike.com/. I'm trying to achieve this with the following step: Opening BurpSuite and Firefox Turning on ...
-1
votes
1answer
410 views

mitmproxy: Error starting proxy server: OSError(98, 'Address already in use') [closed]

I just installed mitmproxy tool. I want to run it. Once I type: sudo mitmproxy I get this error: Error starting proxy server: OSError(98, 'Address already in use') I searched and found some ...
0
votes
1answer
52 views

Can a proxy server redirect traffic to malicious websites or modify downloads?

I was wondering if a proxy server from the internet could redirect traffic to malicious websites or download malware or even modify downloads( I do not plan on using a proxy server i found from the ...
0
votes
0answers
53 views

Using proxy over VPN? [duplicate]

If I setup a firefox browser with proxy settings, then I launch NordVPN, and start browsing through firefox with the proxy, will my data be encrypted? So in basic terms, will my proxy traffic also go ...
0
votes
2answers
178 views

Concept for (almost) untraceable networking setup

I have been working on an my digital footprint lately, trying to reduce it as much as possible, taking steps like fully encrypting my device with Veracrypt, installing 3 AVs, or spending hours trying ...

1
2 3 4 5
13