Collaborate Disseminate
To connect to the online platform of the company I work for, I have to use a proxy. Is it possible for the person responsible for this platform to check if I am currently using other programs in addition to the browser with the open platfo… Continue reading Online platform control (proxy)
I work for a software company and I’m currently doing research for an enhancement request. Essentially we have a application client which talks to a rest end point which is authenticated using basic authentication over SSL. A client is re… Continue reading Basic authentication after mTLS?
I was wondering if you have collected/crossed any labelled dataset in the following context for cyber-security threats:
Web requests
HTTP requests
(proxy) Web server logs
Any updates will be highly appreciated.
Continue reading Is there any public labelled dataset for Web Servers logs/ HTTP requests?
Decided to have a look at a list of "open" proxies. I’ve noticed that a good deal of these proxies are on residential IPs.
One of the IPs, 68.188.59.198, is owned by Charter Communications and looks to be the IP of someone’s hous… Continue reading Whats the point in setting up an open proxy?
I’m trying to setup an nginx reverse proxy to a web product I can’t modify (it’s an appliance).
Client –> https://myapp.com –> nginx –> https://10.1.5.9
I managed to do so, but it required stripping the "Origin" and … Continue reading Should I strip the "Origin" header from client requests?
I have tried to create my own proxy server by using AWS Linux EC2 instance. I followed the steps from this article and this article. But after create the instance and configure the Tinyproxy and then configure browser to this proxy, it sho… Continue reading Create my own proxy server by using AWS Linux EC2 instance for privacy [closed]
i try to find http smuggling in big bug bouny program
if i send this to the server
POST /path HTTP/1.1
Host: subdomain.domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: Keep-Alive
Content… Continue reading http smuglling how can i do a poc in a big websites?
i try to find http smuggling in big bug bouny program
if i send this to the server
POST /path HTTP/1.1
Host: subdomain.domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: Keep-Alive
Content… Continue reading http smuglling how can i do a poc in a big websites?
i try to find http smuggling in big bug bouny program
if i send this to the server
POST /path HTTP/1.1
Host: subdomain.domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: Keep-Alive
Content… Continue reading http smuglling how can i do a poc in a big websites?
Stripe’s fraud detection documentation claims it has
Proxy Detection
When I search for how it might be detecting traffic from proxies, I see this great answer, which show how to detect that traffic.
But I am not sure how reliable it is. … Continue reading Is it possible to completely obfuscate proxy servers?