Skip to main content
9 votes
Accepted

Disable or bypass SSL Pinning/Certificate Pinning on Android 6.0.1

Did you go through these procedures to get JustTrustMe to bypass the cert pinning -- http://www.welivesecurity.com/2016/09/08/avoid-certificate-pinning-latest-versions-android/ -- ? If you are just ...
atdre's user avatar
  • 19.1k
9 votes
Accepted

Can I use CloudFlare if I want to avoid NSA and FISA secret orders?

First of all, just because you use CloudFlare does not mean that the traffic will pass through the US. CloudFlare currently has 102 edges, and requests will be sent to the nearest one. This is what is ...
Anders's user avatar
  • 65.7k
9 votes
Accepted

httpoxy - does TLS/SSL mitigate the vulnerability of HTTP Proxy header?

I did not know about this until I read the link you posted, so do not view this answer as authorative. I would recommend you to take the precautions listed under "Immediate Mitigation" now, ...
Anders's user avatar
  • 65.7k
9 votes
Accepted

Is basic HTTP proxy authentication secure?

HTTP Basic over an unsecured connection exposes the username and password, as you expected. Even over an encrypted connection, basic auth isn't ideal because it exposes the credentials on every new ...
CBHacking's user avatar
  • 49.6k
7 votes
Accepted

Working of SSH connection through Proxy

You are correct on the different headers (a.k.a. banners), and that plain SSH will not traverse an HTTP proxy. But proxies come with inbuilt traversal methods, and an HTTP proxy come with the HTTP ...
grochmal's user avatar
  • 5,887
7 votes
Accepted

Burpsuite: just passthrough firefox detect portal

Disable Captive portal from firefox as seen in this link. In order to do that open a new tab and type about:config, then search for network.captive-portal-service.enabled and set it as false then you ...
Dimitrios Desyllas's user avatar
4 votes
Accepted

How does firewall differentiate between browsing and downloading?

The firewall installed at my college's router allows me to surf the internet but never allows me to download any package that has a size more than 100mb. I wonder how exactly does it differentiate ...
Alexander O'Mara's user avatar
4 votes

Is it possible to lock down the http / https proxy settings on a Windows Phone?

To achieve that, you need to choose/use a Mobile Device Management (MDM) solution. There are some solutions about MDM for Windows Phone / Windows 10 Mobile. Look: From Microsoft: https://technet....
MetalicUNQ's user avatar
4 votes

How does mobile free internet bypass works? (UBT / FBT)

(See edit below for solution) I've been trying to figure this out myself, because I'm incredulous that this actually works. As far as I can tell from the guides I've seen (I haven't used it myself), ...
Stavros Korokithakis's user avatar
4 votes

Burpsuite: just passthrough firefox detect portal

When you get a request in BurpSuite that you don't want to intercept again, click the "Action" button, followed by "Do not intercept...", and choose "requests to this host". This should solve the ...
multithr3at3d's user avatar
4 votes

Why isn't an Expect-CT violation report sent when I use a certificate generated with Burp Suite?

Certificate Transparency (CT) does not apply to non-public root Certificate Authorities. CT only validates that certificates issues by trusted public CAs were issued legitimately. Your Burp Suite ...
Dauntless's user avatar
  • 171
4 votes
Accepted

SSL MITM Proxy Security - Can we rely on it?

It should be secure overall, but it's not as secure as a direct communication (endpoint <-> website) would be, because there is another section that could get compromised (endpoint <-> proxy <...
Raimonds Liepiņš's user avatar
4 votes

Is it possible to scan the whole IP range to find a domain behind the CDN?

Probably not. CNN could be using a push CDN (where data is sent to the CDN) instead of a pull CDN (where it downloads from a central server). Fastly also provides hosting services, so CNN could just ...
Stack Tracer's user avatar
4 votes
Accepted

Is it possible to scan the whole IP range to find a domain behind the CDN?

There is no need to scan the whole IPv4 space. Completely wasteful. If you already know the CDN, then you can easily find the ASN and all the IP ranges under that AS. Very large organizations may run ...
Kate's user avatar
  • 8,435
3 votes

How does mobile free internet bypass works? (UBT / FBT)

This seems to exploit a vulnerability in how that particular ISP handles quotas. A lot of ISPs implement quotas at an application level and not at a packet level, so they can discriminate based on ...
André Borie's user avatar
  • 12.8k
3 votes

Intercept traffic other than port 80 and 443 on burp suite

In the screenshots below, I've assumed you want to intercept traffic at port 8080 (which is not the default port for the http protocol). Start burpsuite and enable it to start intercepting network ...
Sandeep S. Sandhu's user avatar
3 votes
Accepted

Would a reverse-proxy authentication server be a secure setup?

Reverse Proxies are pretty common for what you are asking. Quite a few companies make servers designed for what your asking so you could use that as a reference. For instance, I've used WebSeal (IBM ...
Shane Andrie's user avatar
  • 3,840
3 votes
Accepted

https: Is my company connection intercepted?

Even though we are using a proxy, it is sufficient to check the certificate hierarchy and when it's the same inside the companys network and in my home network, I can conclude I'm not being sniffed ...
Steffen Ullrich's user avatar
3 votes
Accepted

Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise "problem")

I'm assuming you mean "use Burp's built-in functionality, such as Change request method", when you say "editing HTTP... with burp" (as opposed to "manually"), and that just changing the request text ...
CBHacking's user avatar
  • 49.6k
3 votes
Accepted

Is it possible to view the cipher suites offered on my behalf by a MITM proxy?

You don't need to do network sniffing, you just need to run a server that displays its connection parameters in detail. Contact that server from your client. Some existing servers: Qualys is best ...
Gilles 'SO- stop being evil''s user avatar
3 votes
Accepted

What does using a VPN offers over HTTPS + DoH in terms of protection?

A VPN provides an encrypted tunnel from the VPN client to the VPN exit. All that somebody in the path of the tunnel (like the ISP) can see is that there is some traffic between client and exit, ...
Steffen Ullrich's user avatar
3 votes

SNI leakage prevention with proxy

Ultimately, it doesn't matter if you assume the attacker can listen to data after the proxy. The proxy will have to send a SNI to the server, which, barring ESNI as you do, has to be in clear text. If ...
vidarlo's user avatar
  • 16.6k
2 votes

Reverse Proxy + WAF

You haven't defined the website/application. Is it mutable? - if it's mostly static content then a few web-server rules could drop any malicious traffic. If it's customer facing/dynamic... do you ...
CGretski's user avatar
  • 166
2 votes
Accepted

Is it possible to lock down the http / https proxy settings on an Android phone?

Mobile Device Management (MDM) solutions exist that allow you to control and lock down settings on the device, as well as manage devices from a central location.
multithr3at3d's user avatar
2 votes
Accepted

Is it possible to lock down the http / https proxy settings on an iPhone?

Configuration 2 has an option specifically for a HTTP Global Proxy. You will need to get it on the Mac app store (https://itunes.apple.com/us/app/apple-configurator-2/id1037126344?mt=12). Once you'...
Matt's user avatar
  • 254
2 votes

How does a router calculate the amount of data used per device?

To draw an analogy, sending unencrypted packets is like sending postcards in the mail, while sending encrypted packets is like sending sealed envelopes instead. In both cases the sender and addressee ...
Mark Ripley's user avatar
2 votes
Accepted

How does a router calculate the amount of data used per device?

A router doesn't need to inspect the actual traffic being sent to know how much is being sent. So no, encryption probably wouldn't help in this case. Presumably they are monitoring your total traffic,...
Alexander O'Mara's user avatar
2 votes
Accepted

How can I see if a site supports HTTPS?

Connecting to the remote site on port 443 is pretty much all you need to do. If you have a web site running on the default port at a given host name, then it will use port 443 for HTTPS. If the web ...
Stephane's user avatar
  • 18.7k
2 votes
Accepted

Server is returning an unrecognized error message?

HTTPS intercepting proxies are commonplace in many companies. But also many desktop antivirus products ship with a proxy to intercept and scan HTTPS traffic. And sometimes malware does it too. These ...
Steffen Ullrich's user avatar
2 votes

How SSL/TLS handshake happens when we use Cloudflare Service?

You would need to provide your private key to Cloud Flare to have them create a valid SSL/TLS connection with your clients on your behalf. This gives them full plain text access to all content ...
MikeSchem's user avatar
  • 2,351

Only top scored, non community-wiki answers of a minimum length are eligible