New answers tagged

0

You mentioned OpenVPN specifically. I am surprised this answer hasn't been done yet. This situation happens to me all the time and I fixed it by running a second OpenVPN server on port 443 (TCP). I run PiVPN and it was easy to setup: https://github.com/pivpn/pivpn/issues/178#issuecomment-269882913 Basically copy the OpenVPN config that PiVPN creates to a ...


0

Not sure someone can answer this as it could be many things. It’s throwing a server side error so it’s clearly not happy. All I can think of is checking it’s completing any protocol handshakes in a timely manner, and that anything that is being sent to the server is not being malformed or missing (e.g querystrings, cookies, session variables)


5

It is possible to do limited traffic analysis without doing decryption based on timing, size and direction of transferred data. For example HTTP/1 has a request-response pattern where the requests from the client are usually small while the responses from the server are much larger. Additionally the information in the TLS handshake often allow to distinguish ...


0

I will provide 2 demo scenarios with free/open source apps. You can use any sort of firewall or network monitoring tool to pass all your traffic through, make it keep logs and feed these logs to an elasticsearch/kibana. I have seen this combo doing fairly good job analyzing logs in blue team exercises with live attack/defense scenarios. Use an external ...


1

A Virtual Private Network VPN works at the network layer, and you could use it to route any network traffic, while a proxy could be many things. E.g. a SOCKS proxy proxies TCP connections and an SSH tunnel could be used for similar purposes than a VPN, but you are more likely referring to a HTTP proxy, that forward HTTP request. Nevertheless, proxy with an ...


1

This problem comes from the configuration of unite.nike.com, which is the domain used to login users. The server replies with a 403 Forbidden response, so the AJAX request fails, and the site displays the "An error occurred" message. This domain is protected by Akamai, and it seems to have a very strict security configuration to detect MitM / bots: I can't ...


0

Yes, your concern is justifiable. From the Set-Cookie documentation at Mozilla: Path=<path-value> Optional Indicates a URL path that must exist in the requested resource before sending the Cookie header. The %x2F ("/") character is interpreted as a directory separator and sub directories will be matched as well (e.g. path=/docs, "/...


0

Short Answer: NO, as a home user, unless you misconfigured your DHCP network (or your ISP is doing bad things). Long answer: You are not supposed to run your HOME/Enterprise network under an valid internet subdomain name. Depending on your ISP, your computer should have received from DHCP server parameters giving it a FQDN like mylovelyPC.ISPName.loc. or ...


Top 50 recent answers are included