New answers tagged

1

There are multiple VPN detection services available. Most of them use a combination of detection techniques, but the main one they all seem to use is to check the organisation that owns the IP address. Most VPNs will use an IP address that is owned by a datacentre, which will be easily detected by their system. If you use a VPN service that uses an IP ...


0

I couldn’t find any working method to inject it without the browser’s self-signed warning. ... Is it possible to inject js into https sites with bettercap https proxy or maybe there is another method? You are basically asking if there is a way to modify the transferred data inside a HTTPS connection, without the user getting a warning. What you describe as ...


1

The whole idea, however flawed, of using trusted certificates for securing web sites is that the certificate is signed by generally recognized trusted authorities. This provides a strong probability that the site is the official site and not some kind of spoof or clone. A self signed certificate, that is one that is not signed by trusted authority, is just ...


0

The general concept introduces a big security issue, since this way all domains are merged into the single domain of the proxy. Any protection which relies on the concept of a separate origin per domain (i.e. same origin policy, cookie policy, CORS, CSP ...) will cease to exist, since the browser sees everything as being in the same origin. On top of this ...


Top 50 recent answers are included