Collaborate Disseminate
I am woking on a project where I need to build a blueprint security model for a proxy that should mediate and handle communication between two computers. Because this is a first for me, I don’t have a lot information about "security m… Continue reading How do you build a good security model for a proxy?
I am connecting to a HTTPS service with SSL through a HTTP (not HTTPS) proxy.
I am using Chrome/Firefox proxy settings. (Chrome does not directly expose them, but it can be set via chrome extension or by command line argument. Firefox expo… Continue reading What can evil HTTP proxy do, when using HTTPS?
Most corporations have a forward proxy to channel all traffic from devices on the intranet to the internet, for various security reasons.
When the device is on the internet, I suppose the proxy is not used. Does the browser "try"… Continue reading Browser Corporate Proxy – Intranet vs Internet
In TLS 1.2 / HTTP(S) context, plaintext target hostname could potentially leak in 3 different ways:
In DNS query prior to TCP/TLS/HTTP connection.
In TLS handshake, ClientHello message, in SNI extension.
In HTTP Host header.
DNS leakage … Continue reading SNI leakage prevention with proxy
Can I use Forcepoint Security Manager 8.5 (WebSense) as an http proxy for my SFTP client connections to external Servers?
Currently when doing http requests I’m able to specify an http proxy to fetch external resources (Ex. google.maps) an… Continue reading Does Forcepoint Security Manager 8.5 (WebSense) allows SFTP petitions?
Here is the situation I have in hands:
I have a desktop application with my data on it and I need to extract all of it to migrate it to a new application. There are thousands of customer files so doing it manually is really not an option. … Continue reading How to intercept network connection/requests of a desktop app on MacOS [closed]
To connect to the online platform of the company I work for, I have to use a proxy. Is it possible for the person responsible for this platform to check if I am currently using other programs in addition to the browser with the open platfo… Continue reading Online platform control (proxy)
I work for a software company and I’m currently doing research for an enhancement request. Essentially we have a application client which talks to a rest end point which is authenticated using basic authentication over SSL. A client is re… Continue reading Basic authentication after mTLS?
I was wondering if you have collected/crossed any labelled dataset in the following context for cyber-security threats:
Web requests
HTTP requests
(proxy) Web server logs
Any updates will be highly appreciated.
Continue reading Is there any public labelled dataset for Web Servers logs/ HTTP requests?
Decided to have a look at a list of "open" proxies. I’ve noticed that a good deal of these proxies are on residential IPs.
One of the IPs, 68.188.59.198, is owned by Charter Communications and looks to be the IP of someone’s hous… Continue reading Whats the point in setting up an open proxy?