Collaborate Disseminate
This question already has an answer here:
Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?
3 answers
… Continue reading https: Is my company connection intercepted? [duplicate]
I have the latest version of bettercap. I have the latest version of Kali Linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the latest version of Windows 10 with Chrome version 70.0.353… Continue reading Bettercap 2.x SSLStrip Is Not Converting Links
I have the latest version of bettercap. I have the latest version of Kali linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the lowest possible version of WindowsXP with th… Continue reading Bettercap 2.x SSLStrip Is Not Breaking TLS (Without HSTS)
Regarding ESNI RFC (https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-02) it copes with many possible security vulnerabilities. However I’m interested how is it supposed to prevent confidential information leakage (SNI) in case of … Continue reading ESNI (Encrypted Server Network Identification) with HTTP CONNECT (HTTP Proxy)
I am using https request for web API in my app. But i know Charles allowed to access https request also, via install root certificates on device. So, Someone download app from play store and install root certificates on his d… Continue reading Protect app from Http Proxy like Charles
I always got proxies from proxylist websites but I never asked me how these sites discover new proxy. So how?
Continue reading How does proxylist sites discover new proxy?
So basically I’ve put my PAC-file under a non-secure web server with no authentication whatsoever in my organization. Later, I found out that there have been many attacks using this file type in other countries.
How true is… Continue reading Risk in having the PAC file in a server with no authorisation
I work at a small consultancy and we often make web apps for our clients. One part of the web app that is often repetitive to write is the authentication system. In a lot of our web apps we would like to support OAuth login… Continue reading Would a reverse-proxy authentication server be a secure setup?
When I enable Burpsuite’s Proxy I continiously get http GET requests for firefox’s detectportal as seen in the following image:
How I can configure it to somehow just pass though theese requests silently and just load the target url?
I… Continue reading Burpsuite: just passthrough firefox detect portal
I was reading about the offerings of the Cloudflare and then I read about the working of Cloudflare.
Based on my understanding, the domain name of my website(alice.com) is resolved to the IP address of Cloudflare Data Center … Continue reading How SSL/TLS handshake happens when we use Cloudflare Service?