Collaborate Disseminate
Decided to have a look at a list of "open" proxies. I’ve noticed that a good deal of these proxies are on residential IPs.
One of the IPs, 68.188.59.198, is owned by Charter Communications and looks to be the IP of someone’s hous… Continue reading Whats the point in setting up an open proxy?
I’m trying to setup an nginx reverse proxy to a web product I can’t modify (it’s an appliance).
Client –> https://myapp.com –> nginx –> https://10.1.5.9
I managed to do so, but it required stripping the "Origin" and … Continue reading Should I strip the "Origin" header from client requests?
I have tried to create my own proxy server by using AWS Linux EC2 instance. I followed the steps from this article and this article. But after create the instance and configure the Tinyproxy and then configure browser to this proxy, it sho… Continue reading Create my own proxy server by using AWS Linux EC2 instance for privacy [closed]
i try to find http smuggling in big bug bouny program
if i send this to the server
POST /path HTTP/1.1
Host: subdomain.domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: Keep-Alive
Content… Continue reading http smuglling how can i do a poc in a big websites?
i try to find http smuggling in big bug bouny program
if i send this to the server
POST /path HTTP/1.1
Host: subdomain.domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: Keep-Alive
Content… Continue reading http smuglling how can i do a poc in a big websites?
i try to find http smuggling in big bug bouny program
if i send this to the server
POST /path HTTP/1.1
Host: subdomain.domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: Keep-Alive
Content… Continue reading http smuglling how can i do a poc in a big websites?
Stripe’s fraud detection documentation claims it has
Proxy Detection
When I search for how it might be detecting traffic from proxies, I see this great answer, which show how to detect that traffic.
But I am not sure how reliable it is. … Continue reading Is it possible to completely obfuscate proxy servers?
What are the security risks that someone using HTTPS (everywhere) + DoH is vulnerable to, comparing to someone using a "thrusted" VPN?
Continue reading What does using a VPN offers over HTTPS + DoH in terms of protection?
Sorry for my lack of terminology in the field, that’s something I’ve little (or none any) practical knowledge about.
I’ve browsed similar questions on the security risks of using (web) proxies, but both the questions and the answers genera… Continue reading Is it worth using an http proxy?
I have been looking for cloud based proxies, and I notice that it’s very common to authenticate to a proxy using basic auth over an unencrypted connection. I don’t understand why this is considered acceptable.
Is proxy authentication diffe… Continue reading Is basic HTTP proxy authentication secure?