14
votes
Are future TLS versions going to prevent traffic inspection?
TLS by itself protects the sniffing and modification of traffic between two endpoints, i.e. client and server. TLS interception just makes two TLS connections where only one was, i.e. client to ...
- 198k
12
votes
Accepted
Are future TLS versions going to prevent traffic inspection?
No.
AFAIK there is nothing inside the TLS 1.3 Draft about that. And I don't think there's a technical solution to this either. If you allow somebody to install an additional root CA on your computer, ...
- 18k
9
votes
Accepted
Disable or bypass SSL Pinning/Certificate Pinning on Android 6.0.1
Did you go through these procedures to get JustTrustMe to bypass the cert pinning -- http://www.welivesecurity.com/2016/09/08/avoid-certificate-pinning-latest-versions-android/ -- ?
If you are just ...
- 19k
9
votes
Accepted
httpoxy - does TLS/SSL mitigate the vulnerability of HTTP Proxy header?
I did not know about this until I read the link you posted, so do not view this answer as authorative. I would recommend you to take the precautions listed under "Immediate Mitigation" now, ...
- 65.4k
9
votes
Accepted
Can I use CloudFlare if I want to avoid NSA and FISA secret orders?
First of all, just because you use CloudFlare does not mean that the traffic will pass through the US. CloudFlare currently has 102 edges, and requests will be sent to the nearest one. This is what is ...
- 65.4k
8
votes
Accepted
Is basic HTTP proxy authentication secure?
HTTP Basic over an unsecured connection exposes the username and password, as you expected. Even over an encrypted connection, basic auth isn't ideal because it exposes the credentials on every new ...
- 46.4k
7
votes
Accepted
Working of SSH connection through Proxy
You are correct on the different headers (a.k.a. banners), and that plain SSH will not traverse an HTTP proxy. But proxies come with inbuilt traversal methods, and an HTTP proxy come with the HTTP ...
- 5,857
6
votes
Accepted
Burpsuite: just passthrough firefox detect portal
Disable Captive portal from firefox as seen in this link.
In order to do that open a new tab and type about:config, then search for network.captive-portal-service.enabled and set it as false then you ...
4
votes
Accepted
Restricting access to "hacking" sites and tools
The main issue is that these tools induce suspicious behaviors (suspicious network activity, suspicious files, suspicious process behavior, etc.). From a network monitoring perspective, how would you ...
- 19.2k
4
votes
Accepted
How does firewall differentiate between browsing and downloading?
The firewall installed at my college's router allows me to surf the internet but never allows me to download any package that has a size more than 100mb. I wonder how exactly does it differentiate ...
- 8,834
4
votes
Is it possible to lock down the http / https proxy settings on a Windows Phone?
To achieve that, you need to choose/use a Mobile Device Management (MDM) solution.
There are some solutions about MDM for Windows Phone / Windows 10 Mobile. Look:
From Microsoft:
https://technet....
- 41
4
votes
How does mobile free internet bypass works? (UBT / FBT)
(See edit below for solution)
I've been trying to figure this out myself, because I'm incredulous that this actually works. As far as I can tell from the guides I've seen (I haven't used it myself), ...
4
votes
Burpsuite: just passthrough firefox detect portal
When you get a request in BurpSuite that you don't want to intercept again, click the "Action" button, followed by "Do not intercept...", and choose "requests to this host". This should solve the ...
- 12.7k
4
votes
Why isn't an Expect-CT violation report sent when I use a certificate generated with Burp Suite?
Certificate Transparency (CT) does not apply to non-public root Certificate Authorities. CT only validates that certificates issues by trusted public CAs were issued legitimately.
Your Burp Suite ...
- 171
4
votes
Accepted
SSL MITM Proxy Security - Can we rely on it?
It should be secure overall, but it's not as secure as a direct communication (endpoint <-> website) would be, because there is another section that could get compromised (endpoint <-> proxy <...
- 1,012
4
votes
Is it possible to scan the whole IP range to find a domain behind the CDN?
Probably not.
CNN could be using a push CDN (where data is sent to the CDN) instead of a pull CDN (where it downloads from a central server).
Fastly also provides hosting services, so CNN could just ...
- 544
4
votes
Accepted
Is it possible to scan the whole IP range to find a domain behind the CDN?
There is no need to scan the whole IPv4 space. Completely wasteful. If you already know the CDN, then you can easily find the ASN and all the IP ranges under that AS. Very large organizations may run ...
- 7,847
4
votes
SNI leakage prevention with proxy
Ultimately, it doesn't matter if you assume the attacker can listen to data after the proxy. The proxy will have to send a SNI to the server, which, barring ESNI as you do, has to be in clear text.
If ...
- 15.4k
3
votes
Intercept traffic other than port 80 and 443 on burp suite
In the screenshots below, I've assumed you want to intercept traffic at port 8080 (which is not the default port for the http protocol).
Start burpsuite and enable it to start intercepting network ...
3
votes
How does mobile free internet bypass works? (UBT / FBT)
This seems to exploit a vulnerability in how that particular ISP handles quotas.
A lot of ISPs implement quotas at an application level and not at a packet level, so they can discriminate based on ...
- 12.8k
3
votes
Accepted
Would a reverse-proxy authentication server be a secure setup?
Reverse Proxies are pretty common for what you are asking. Quite a few companies make servers designed for what your asking so you could use that as a reference.
For instance, I've used WebSeal (IBM ...
- 3,820
3
votes
Accepted
https: Is my company connection intercepted?
Even though we are using a proxy, it is sufficient to check the certificate hierarchy and when it's the same inside the companys network and in my home network, I can conclude I'm not being sniffed ...
- 198k
3
votes
Accepted
Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise "problem")
I'm assuming you mean "use Burp's built-in functionality, such as Change request method", when you say "editing HTTP... with burp" (as opposed to "manually"), and that just changing the request text ...
- 46.4k
3
votes
Accepted
Is it possible to view the cipher suites offered on my behalf by a MITM proxy?
You don't need to do network sniffing, you just need to run a server that displays its connection parameters in detail. Contact that server from your client.
Some existing servers:
Qualys is best ...
3
votes
Accepted
What does using a VPN offers over HTTPS + DoH in terms of protection?
A VPN provides an encrypted tunnel from the VPN client to the VPN exit. All that somebody in the path of the tunnel (like the ISP) can see is that there is some traffic between client and exit, ...
- 198k
2
votes
Is it possible to utilize an outbound proxy to upgrade to TLS
Due to the security built into TLS this can not be done by changing the existing TLS handshake in the proxy. Instead a TLS connection between the target server and the proxy and another TLS connection ...
- 198k
2
votes
Reverse Proxy + WAF
You haven't defined the website/application.
Is it mutable? - if it's mostly static content then a few web-server rules could drop any malicious traffic.
If it's customer facing/dynamic... do you ...
- 166
2
votes
Accepted
Is it possible to lock down the http / https proxy settings on an Android phone?
Mobile Device Management (MDM) solutions exist that allow you to control and lock down settings on the device, as well as manage devices from a central location.
- 12.7k
2
votes
Accepted
Is it possible to lock down the http / https proxy settings on an iPhone?
Configuration 2 has an option specifically for a HTTP Global Proxy. You will need to get it on the Mac app store (https://itunes.apple.com/us/app/apple-configurator-2/id1037126344?mt=12).
Once you'...
- 244
2
votes
How does a router calculate the amount of data used per device?
To draw an analogy, sending unencrypted packets is like sending postcards in the mail, while sending encrypted packets is like sending sealed envelopes instead. In both cases the sender and addressee ...
- 667
Only top scored, non community-wiki answers of a minimum length are eligible