IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [http-proxy]

142 questions
46
votes
3 answers

How can a website find my real IP address while I'm behind a proxy?

I just wonder how some website like WhatIsMyIP find out what your real IP address is, even if you use proxy server. It said : Proxy Detected and then they give your real IP address. Is it possible they use JavaScript to send HTTP request for not…
user13934
15
votes
4 answers

How do proxy servers sniff data?

I live in a country which most website on the internet is blocked by government so we mostly use wide variety of proxies such Web proxies, VPN, SOCKS and most of them are free. My question is: Is there any way, those proxy servers sniff our data…
user13934
3
votes
1 answer

OWASP ZAP does not properly proxy my HTTP responses?

I tried using the web proxy functionality of OWASP Zed Attack Proxy (ZAP) to edit the response JavaScript and HTML. I tried to make a button get the attribute disable="false" instead of disable="". I can easily use the Firebug console to achieve…
David from earth
  • 169
  • 1
  • 8
0
votes
0 answers

Are forward proxies secure when SSL/TLS resource is requested?

I set https://tinyproxy.github.io/ in a rented VPS in another country. Now I can access some resources granted to the IP range associated with that country. As I understand ISP + a forward proxy sees everything for plain HTTP protocol. That about…
gavenkoa
  • 123
  • 8
0
votes
1 answer

Browser Corporate Proxy - Intranet vs Internet

Most corporations have a forward proxy to channel all traffic from devices on the intranet to the internet, for various security reasons. When the device is on the internet, I suppose the proxy is not used. Does the browser "try" to connect to proxy…
Nemophile
  • 3
  • 1
0
votes
2 answers

Why do we have to specify HTTP proxy specs when inside a LAN that is behind a proxy server?

Following this post, outgoing traffic will go through the proxy only if the requesting app knows the proxy url, if it doesn't then sending the request out of the LAN is denied by the proxy. In this case it's like the app saying to the LAN "I'd like…
ThCollignon
  • 103
  • 3
0
votes
1 answer

Defeating proxy using hosts file

I had somebody say that it would be possible to defeat any http proxy url blocking, "by editing the hosts file and so that some whitelisted site maps to an IP address they control, with a server set to accept any domain and would return any site…
DarcyThomas
  • 1,298
  • 1
  • 10
  • 15
0
votes
1 answer

How to capture HTTP Traffic if the application uses Automatic Configuration Script?

I am testing an application that requires "Automatic configuration script" to be configured in web browser. How can i intercept HTTP traffic in such case. I am aware of temper data add-on but is there a way to configure HTTP proxy (such as…
PenGeek
  • 199
  • 1
  • 11
0
votes
0 answers

Is a proxy server using Squid / Squid Guard (or something similar) necessary if you're running a kiosk network?

When setting up a Kiosk network, one that you're using so that people can access a single website, shouldn't you use a proxy server that uses Squid or Squid Guard (or some sort of proxy) to limit the sites they're able to visit? Someone showed me on…
leeand00
  • 1,431
  • 1
  • 14
  • 22