Collaborate Disseminate
Goal
The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store.
Ex. Alexa, Chromecast, and maybe iPad.
Steps (Windows 10 PC)
I did… Continue reading Monitor HTTPS URL logging of a specific device of a Network
I run nikto on a server, let’s say www.example.com and it says the following:
OSVDB-630: The web server may reveal its internal or real IP in the Location header via a request to / over HTTP/1.0. The value is “A.B.C.D”.
I have nginx … Continue reading Private ip address revealed by nginx, should I worry?
I am trying to intercept the Traffic of my iPhone default mail client.
I have burp suite setup with the certificate installed correctly cause I get traffic from the browser but I don’t see the traffic from my mail app.
Could someone hel… Continue reading Trying to intercept iphone native mail application Traffic on Burp Suite [closed]
I am very curious if it is possible to find the real IP address of a domain “protected” by a CDN service.
For example, www.cnn.com uses Fastly service, and the domain name only resolves to a Fastly edge server’s IP. If I scan the whole 4… Continue reading Is it possible to scan the whole IP range to find a domain behind the CDN?
If I do a web search for proxying macOS apps using Burp Suite, I don’t get any useful info. Instead, I get dozens of results talking about how to proxy iOS or Android apps. I am talking about desktop apps. On macOS, I’ve followed the below… Continue reading How can I proxy traffic of macOS Mojave APPS using Burp Suite?
I am diving now into WebGoat, there’s this little exercise in the “general” tab calle d “http proxies” which asks you to use zap/burp to intercept and modify a request, this is what is being us asked.
I understood what is … Continue reading Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise "problem")
Lately i was experiencing weird behavour from some big websites.
More specifically, when i normally tried to connect to facebook, i would be greeted with this login page:
I have placed these with boxes to protect my priva… Continue reading Am i being MITMed?
Given…
a public webservice with enabled SSL/TLS
the web service enforces authentication using JSON Web Tokens
a client on a LAN without Internet connection
a proxy on the LAN that grants point-to-point connections to ment… Continue reading Benefit of authentication with a gateway
I am programming a way in PHP for my users to be able to access a remote API though my website. I was wondering if any of you had some input on whether or not this was secure (NOT considering any vulnerabilities that may be on the remote s… Continue reading Secure GET-based remote API access via PHP
For some reason i access my internet through a HTTP proxy.
Is there a way to tunnel my whole Linux machine (currently am using ubuntu 18.04) through http proxy.
If i change proxy setting in the Ubuntu Network Settings the h… Continue reading Is it possible to tunnel my whole linux machine through http proxy?