9
votes
Accepted
Are SOCKS5 credentials safe during authentication on proxy server
Neither traffic nor credentials are encrypted in the SOCKS5 protocol. From RFC 1929:
This document describes a subnegotiation that provides authentication services to the SOCKS protocol. Since the ...
- 66.5k
4
votes
Any way to get high quality live proxies other than buying them from a website?
The sites that sell proxies either have setup these proxies themselves or just scan the internet and look for open proxies. As you discovered yourself, these free proxies are usually not safe. They ...
- 198k
4
votes
Can my isp see my sock5 proxy traffic?
YES
SOCKS5 is a proxy, which means the traffic will go directly to it before the target. There is no encryption, so everything is plain text.
Taken from https://unix.stackexchange.com/
SOCKS5 is ...
- 1,106
4
votes
Telegram: Security risks for a user of using third-party socks5 proxy?
The biggest security concern for most communication system is third party abilities to sniff / intercept and decode/tampered the message. Such attack are called "Man-in-the-middle attacks" (MiTM). ...
- 2,407
4
votes
Accepted
Why is it dangerous to socksify a whole system?
Based on the surrounding text, it doesn't seem like they are warning you about potential security implications or bad practice, but rather the fact that it may break connectivity for some parts of the ...
- 12.7k
4
votes
Accepted
Is the same key used for Authorization and Encryption? (SSH Tunnel)
TL;DR: In SSH your private key is not used for encryption at all, it's only used to prove who you are. Each new connection to the server will establish a different encryption session key.
Here are ...
- 58.8k
3
votes
Is it safe to browse the web through an SSH SOCKS5 connection to an untrusted proxy?
Accessing an untrusted machine with SSH is a problem in the first place, see What are the risks of SSHing to an untrusted host?, Risks of ssh to an untrusted host?, Is it safe to connect to random SSH ...
- 198k
3
votes
Accepted
Socks5 proxy: Danger of MITM malicious injection wget/ httrack?
Does wget or httrack or proxychains validate the https connection and abort the connection if it gets tempered with?
Proxychains does not need to verify the connection since it is only forwarding ...
- 198k
2
votes
Can my isp see my sock5 proxy traffic?
SOCKS5 is a traffic encapsulation protocol which contains no kind of encryption or integrity protection. Anybody able to sniff the connection can see what you are doing and an active attacker (i.e. ...
- 198k
2
votes
Why is it dangerous to socksify a whole system?
According to the tutorial, socksifying your entire system involves manually editing your shell startup file. If done improperly, this could destabilise your shell. The reason they discourage ...
- 7,433
2
votes
Accepted
What's the point in a proxy server authorizing/authenticating clients?
This is really two questions, but eh...
What's the point of proxy authentication?
Contrary to what you seem to believe, there are many reasons beyond anonymity to use a proxy (and if you want good ...
- 46.4k
2
votes
Accepted
How do we use TLS/SSL to secure SOCKS5 protocol?
SOCKS5 is just a tunnel protocol which does not provide any encryption by itself. Therefore encryption must be either added outside the tunnel or inside the tunnel, i.e.
outside: wrap SOCKS5 into an ...
- 198k
2
votes
Accepted
Questions about SOCKS5 security
The origin is able to detect the server IP?
Unless the socks server explicitly provides information about it (like adding an X-Forwarded-For header) the website cannot detect the originating IP ...
- 198k
2
votes
Accepted
What are the security implications of connecting to Tor through an SSH SOCKS proxy?
The specific details for your proxy setup are irrelevant. It doesn't matter if it's done through SSH port forwarding or OpenVPN or IPSec or GRE. What matters is whether or not someone who can monitor ...
- 66.5k
2
votes
Accepted
What is a SOCKS proxy?
what I do not understand is why I would use a SOCKS proxy. I mean, for
example, Why I would use a SOCKS proxy and not an HTTPS proxy, what
SOCKS offers me as a proxy
If you are a user, and your ...
- 72.7k
1
vote
Securely access server via FTP through SSH tunnel
If you are interested on the connection between you computer and the FTP server, then yes, it's secure. Everything is running inside the SSH tunnel, it's encrypted and any regular or skilled attacker ...
- 53.5k
1
vote
Can my ISP know that I am using Tor if I am connecting to Tor via an SSH SOCKS5 proxy?
No, your ISP cannot tell you are using Tor.
Your ISP probably can tell you are using SSH as a proxy, but they have no way to identify what you are connecting on the other side of the proxy. They ...
- 53.5k
1
vote
How do we use TLS/SSL to secure SOCKS5 protocol?
You can tunnel arbitrary network traffic through TLS, but SOCKS generally doesn't do so. You'd need a SOCKS server, and client, that establish a TLS connection first and AFAIK this doesn't exist (EDIT:...
- 46.4k
1
vote
Accepted
Is it possible to browse HSTS sites over SOCKS5 proxy?
SOCKS5 by itself just make sure that the necessary TCP connectivity to the target is created and that all data are forwarded between client and server. It also might do a DNS lookup to resolve the ...
- 198k
1
vote
I use VPN+Socks5 proxy for torrents in Utorrent. What is the security risk?
Running a SOCKS5 proxy inside of a VPN is a pretty common setup, and can provide pretty good security since in theory you wouldn't be relying on a single entity for your anonymity.
If you pay for ...
- 5,100
1
vote
How does proxylist sites discover new proxy?
Usually, these sites have admins or people that work for the site. I know a person that works for these kind of sites and he said he uses a proxy scraper like ProxyFire and other ones.
- 205
1
vote
2ip.io/privacy/ and 'Defining tunnel (two way ping)' on SOCKS5 proxy
What this test means is that evidence of a VPN tunnel has been found by way of analyzing cipher timing signatures (ie, passive TCP/IP fingerprinting). Check out the following article for specifics ...
1
vote
Are SOCKS5 credentials safe during authentication on proxy server
SOCKS5 is a transport protocol and by itself it is not encrypted. Requests transmit the credentials in plain text which is considered a security bad practice.
VPN software on a mobile phone would be ...
- 5,841
1
vote
Accepted
Shadowsocks: Doesn't communication with just one server look suspicious to the GFW?
Possible? Sure! Will it be done? I doubt.
Unless your traffic is on the top chart, you are a small fish. And they don't have resources or people or willingness to pursue every single private VPN ...
- 53.5k
1
vote
How can an attacker sniff a password with SOCKS5 proxy?
I did a blog post on this here in 2012: http://security.blogoverflow.com/2012/04/tor-exploiting-the-weakest-link/
The fact is that an attacker can indeed launch attacks as you mention. The exit node ...
- 54.4k
1
vote
Is it possible to have a man in the middle with SOCK5?
Proxy servers would provide no protection against a MITM attack, since your attacker could MITM your connection to the proxy, or the proxies connection to the internet.
by turning my HTTPS ...
- 3,129
Only top scored, non community-wiki answers of a minimum length are eligible