IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [http-proxy]

138 questions
0
votes
2 answers

CORS Anywhere to bypass CSRF protection

CORS Anywhere helps with accessing data from other websites that is normally forbidden by the Same origin policy of Web browsers. Can CORS Anywhere be used to bypass CSRF protection? Reason to ask the question here: Simple, for learning and also…
user11177344
  • 11
  • 3
0
votes
2 answers

Why do we have to specify HTTP proxy specs when inside a LAN that is behind a proxy server?

Following this post, outgoing traffic will go through the proxy only if the requesting app knows the proxy url, if it doesn't then sending the request out of the LAN is denied by the proxy. In this case it's like the app saying to the LAN "I'd like…
ThCollignon
  • 103
  • 3
0
votes
1 answer

Defeating proxy using hosts file

I had somebody say that it would be possible to defeat any http proxy url blocking, "by editing the hosts file and so that some whitelisted site maps to an IP address they control, with a server set to accept any domain and would return any site…
DarcyThomas
  • 1,298
  • 1
  • 10
  • 15
0
votes
0 answers

Preventing admin from changing proxy settings

I am using a proxy server for my environment deployed on premises for internal hosts and on the cloud from BYOD. When a user takes their device off the premises, the proxy changes to an external proxy address. However, I am concerned that if a…
Hammad Qureshi
  • 11
  • 1
0
votes
2 answers

Why is the SSL message red?

The site Phonel.ir uses a SSL certificate. Why is the Error message in red? Is there a problem with the SSL certification? I sometimes use a proxy. Can that be the reason?
Turaj
  • 3
  • 1
0
votes
1 answer

https: Is my company connection intercepted?

I wanted to find out whether my company can see what I'm posting online as soon as using websites using a valid https certificate. I know there are a lot of posts here about whether my company can find out which URLs I've visited. Now I wanted to…
tim
  • 851
  • 7
  • 13
0
votes
2 answers

How does proxylist sites discover new proxy?

I always got proxies from proxylist websites but I never asked me how these sites discover new proxy. So how?
Allexj
  • 103
  • 1
0
votes
1 answer

How to capture HTTP Traffic if the application uses Automatic Configuration Script?

I am testing an application that requires "Automatic configuration script" to be configured in web browser. How can i intercept HTTP traffic in such case. I am aware of temper data add-on but is there a way to configure HTTP proxy (such as…
PenGeek
  • 189
  • 1
  • 11
0
votes
1 answer

POST Request to Server

Assume that a user logged in to a webpage with their own account, then makes a POST request and captures it. With some modification to the captured request, it is being executed. Sure. It goes through without any problems. Is this a security issue…
Dmomo
  • 1
  • 1
0
votes
1 answer

Node.js http-proxy-middleware: secure connection between servers

I have a back-end and a front-end application which are running on two different servers (hosts). To prevent using CORS and simplify the communication, I would like to serve the static front-end with a Node.js application. The requests to the…
ssc-hrep3
  • 101
  • 1
  • 3
0
votes
1 answer

Why do we need to use HTTP CONNECT?

If we are writing a custom http client which connects with an https server. Should the custom client when deployed on machines which are behind web proxy need to send a HTTP CONNECT Request so as to establish a connection with the https site, OR Can…
Shenron
  • 1
  • 2
0
votes
3 answers

Proxy Server options for school administrators

I want to set up a proxy server for a school to prevent users to log-in to site like Facebook, Youtube, etc. I have no idea how to do this, so I´d really appreciate your help.
ION
  • 11
0
votes
1 answer

Block to record http requests using recorder

When I log into any website, I can record all calls while login using jmeter test script recorder or Burp suite but when I try to record calls from face book, it gives me following message on browser. The certificate is not trusted because it is…
Derek
  • 79
  • 1
  • 6
0
votes
0 answers

Is a proxy server using Squid / Squid Guard (or something similar) necessary if you're running a kiosk network?

When setting up a Kiosk network, one that you're using so that people can access a single website, shouldn't you use a proxy server that uses Squid or Squid Guard (or some sort of proxy) to limit the sites they're able to visit? Someone showed me on…
leeand00
  • 1,297
  • 1
  • 13
  • 21
0
votes
1 answer

How to configure proxy settings of cellular internet for burp

I am pen testing an android app and using tethering to connect my phone to my laptop. I configured the access point settings as proxy = ipv4 address of my laptop and port = port on which burp is listening on all interfaces. Burp was intercept the…
t6chgeek
  • 9
  • 1
1 2 3
…
9
10