jetlib.sec » Tags » proxy

Feeds

265150 items (0 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

200 items tagged "proxy"

Related tags: proxy mode [+], internal web servers [+], buffer overflow vulnerability [+], web proxy cache [+], web proxy [+], phpcas [+], apache [+], zorp [+], testing tool [+], proxy firewall [+], policy decisions [+], penetration [+], firewall [+], core architecture [+], zap [+], tor [+], string [+], proxy bypass [+], proof of concept [+], mac os x [+], mac os [+], internet [+], firefox [+], exploits [+], mod [+], ubuntu [+], testing [+], tar [+], remote buffer overflow vulnerability [+], read [+], proxies [+], mode [+], gopher [+], filtering [+], external exposure [+], dns [+], darknet [+], cyclope [+], apache software foundation [+], service vulnerability [+], ycrawler [+], x release [+], windows [+], wildcard characters [+], websense [+], web crawler [+], usn [+], tool 1 [+], tool [+], stefano nichele [+], squid proxy [+], special request [+], socks [+], security vulnerability [+], security notice [+], security [+], remote buffer overflow [+], red hat security [+], red [+], publishers [+], proxy settings [+], proxy filter [+], proxy check [+], prank o [+], pound [+], load balancer [+], internal server error [+], integer overflow [+], installer [+], heap [+], hacks [+], hacking [+], gtk interface [+], gsettings [+], filter [+], fhttp [+], evasion [+], crawling [+], check [+], charlie vedaa [+], caching [+], bypass [+], backend servers [+], attack [+], Tools [+], denial of service [+], vulnerability [+], apache http server [+], xpath expressions [+], url parameter [+], umbraco [+], txt [+], traffic [+], tor proxy [+], timeout [+], tar gz [+], symantec [+], ssl aware [+], ssh ports [+], socks proxy [+], slides [+], siri [+], service [+], security proxy [+], security bug [+], sec wall [+], reverse proxy [+], python library [+], pyproxy [+], proxy server [+], proxy hunter [+], proxy checker [+], promiscuous [+], php script [+], penetration testers [+], pbx [+], open [+], network traffic analysis [+], multithreaded [+], mitmproxy [+], linux [+], level cross [+], iphone [+], header field [+], ftp [+], dnschef [+], denial [+], cvs [+], cross site scripting [+], client proxy [+], client [+], checks [+], checker [+], cas [+], bugtraq [+], authentication schemes [+], authentication header [+], aspx [+], application network [+], apple airport [+], alcatel 4400 [+], alcatel [+], Wireless [+], Release [+], Programming [+], http [+], squid [+], zip [+], wrt [+], winsock functions [+], win [+], web giant [+], vulnerabilities [+], virtual box [+], video [+], sync [+], ssh telnet [+], ssh [+], squipy [+], specific software [+], sophos [+], security response team [+], routers [+], round [+], retired [+], response [+], quot [+], proxy support [+], proxy software [+], proxy host [+], proxy auto configuration [+], proxy authorization [+], proxocket [+], project [+], program [+], plz [+], pipeline [+], pete [+], paraegis [+], owasp [+], overflow [+], openvas [+], open architecture [+], offline storage [+], ntv [+], new [+], negative content [+], mechanism [+], matic [+], linksys [+], libproxy [+], konsole [+], jailbreak [+], interim response [+], integer overflow vulnerability [+], httpd [+], hatkit [+], google [+], functionality [+], forensics [+], firesheep [+], finder [+], file [+], evil [+], doesn [+], dll [+], disclosure [+], custom [+], content length [+], charset [+], car [+], bt4 [+], browser [+], brandon fiquett [+], black hat [+], big g [+], autostart [+], authorization [+], audio [+], arabic [+], antonio [+], admin [+], Software [+], Pentesting [+], Newbie [+], BackTrack [+], Area [+], proxy ftp [+], server mod [+], web [+], null pointer [+], uri [+], information disclosure vulnerability [+], zed attack [+], server [+], security vulnerabilities [+], request body [+], security experience [+], proxy module [+]

• November 25, 2012
• 9:22

  Websense Proxy Filter Bypass

   » ‎ Packet Storm Security Exploits
  Websense Proxy Filter suffers from a special request filter bypass vulnerability.

  Tags:  websense proxy filter proxy-filter special-request vulnerability  

• 9:22

  Websense Proxy Filter Bypass

   » ‎ Packet Storm Security Recent Files
  Websense Proxy Filter suffers from a special request filter bypass vulnerability.

  Tags:  websense proxy filter proxy-filter special-request vulnerability  

• 9:22

  Websense Proxy Filter Bypass

   » ‎ Packet Storm Security Misc. Files
  Websense Proxy Filter suffers from a special request filter bypass vulnerability.

  Tags:  websense proxy filter proxy-filter special-request vulnerability  

• November 14, 2012
• 13:39

  Red Hat Security Advisory 2012-1461-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-1461-01 - libproxy is a library that handles all the details of proxy configuration. A buffer overflow flaw was found in the way libproxy handled the downloading of proxy auto-configuration files. A malicious server hosting a PAC file or a man-in-the-middle attacker could use this flaw to cause an application using libproxy to crash or, possibly, execute arbitrary code, if the proxy settings obtained by libproxy instructed the use of a PAC proxy configuration. This issue was discovered by the Red Hat Security Response Team.

  Tags:  proxy red libproxy security-response-team proxy-auto-configuration red-hat-security  

• July 21, 2012
• 18:01

  Multithreaded Proxy Checker

   » ‎ Packet Storm Security Recent Files
  This php script is a small tool for performing proxy checks.

  Tags:  checker proxy multithreaded proxy-checker php-script checks  

• 18:01

  Multithreaded Proxy Checker

   » ‎ Packet Storm Security Misc. Files
  This php script is a small tool for performing proxy checks.

  Tags:  checker proxy multithreaded proxy-checker php-script checks  

• June 25, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• June 15, 2012
• 17:00

  Squid Proxy Caching Server CNAME Denial of Service Vulnerability

   » ‎ SecuriTeam
  Squid proxy caching server is prone to a denial-of-service vulnerability.

  Tags:  server squid proxy service-vulnerability denial-of-service  

• May 07, 2012
• 13:03

  Red Hat Security Advisory 2012-0542-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0542-01 - The Apache HTTP Server is the namesake project of The Apache Software Foundation. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker.

  Tags:  server proxy apache uri internal-web-servers apache-software-foundation apache-http-server  

• 13:03

  Red Hat Security Advisory 2012-0542-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0542-01 - The Apache HTTP Server is the namesake project of The Apache Software Foundation. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker.

  Tags:  server proxy apache uri internal-web-servers apache-software-foundation apache-http-server  

• 13:02

  Red Hat Security Advisory 2012-0543-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0543-01 - The Apache HTTP Server is the namesake project of The Apache Software Foundation. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker.

  Tags:  server proxy apache uri internal-web-servers apache-software-foundation apache-http-server  

• 13:02

  Red Hat Security Advisory 2012-0543-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0543-01 - The Apache HTTP Server is the namesake project of The Apache Software Foundation. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker.

  Tags:  server proxy apache uri internal-web-servers apache-software-foundation apache-http-server  

• May 03, 2012
• 15:37

  Tor Proxy Bypass Via Firefox

   » ‎ Packet Storm Security Recent Files
  A user has discovered a severe security bug in Firefox related to websockets bypassing the SOCKS proxy DNS configuration. This means when connecting to a websocket service, your Firefox will query your local DNS resolver, rather than only communicating through its proxy (Tor) as it is configured to do.

  Tags:  dns proxy firefox tor-proxy tor socks socks-proxy proxy-bypass security-bug  

• 15:37

  Tor Proxy Bypass Via Firefox

   » ‎ Packet Storm Security Misc. Files
  A user has discovered a severe security bug in Firefox related to websockets bypassing the SOCKS proxy DNS configuration. This means when connecting to a websocket service, your Firefox will query your local DNS resolver, rather than only communicating through its proxy (Tor) as it is configured to do.

  Tags:  dns proxy firefox tor-proxy tor socks socks-proxy proxy-bypass security-bug  

• May 02, 2012
• 0:00

  Vuln: RETIRED: Squid Proxy 'Host' HTTP Header Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RETIRED: Squid Proxy 'Host' HTTP Header Security Bypass Vulnerability

  Tags:  squid retired proxy proxy-host vulnerability  

• April 30, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• April 20, 2012
• 12:53

  Ubuntu Security Notice USN-1400-5

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1400-5 - USN-1400-1 fixed vulnerabilities in Firefox. Firefox 11 started using GSettings to access the system proxy settings. If there is a GSettings proxy settings schema, Firefox will consume it. The GSettings proxy settings schema that was shipped by default was unused by other applications and broke Firefox's ability to use system proxy settings. This update removes the unused schema. Various other issues were also addressed.

  Tags:  proxy firefox gsettings proxy-settings security-notice usn  

• 12:53

  Ubuntu Security Notice USN-1400-5

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1400-5 - USN-1400-1 fixed vulnerabilities in Firefox. Firefox 11 started using GSettings to access the system proxy settings. If there is a GSettings proxy settings schema, Firefox will consume it. The GSettings proxy settings schema that was shipped by default was unused by other applications and broke Firefox's ability to use system proxy settings. This update removes the unused schema. Various other issues were also addressed.

  Tags:  proxy firefox gsettings proxy-settings security-notice usn  

• 12:53

  Ubuntu Security Notice USN-1400-5

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1400-5 - USN-1400-1 fixed vulnerabilities in Firefox. Firefox 11 started using GSettings to access the system proxy settings. If there is a GSettings proxy settings schema, Firefox will consume it. The GSettings proxy settings schema that was shipped by default was unused by other applications and broke Firefox's ability to use system proxy settings. This update removes the unused schema. Various other issues were also addressed.

  Tags:  proxy firefox gsettings proxy-settings security-notice usn  

• April 18, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• April 09, 2012
• 20:30

  Zed Attack Proxy 1.4.0.1 Windows Installer

   » ‎ Packet Storm Security Recent Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Windows installer.

  Tags:  installer proxy windows zed-attack security-experience testing-tool zap  

• 20:30

  Zed Attack Proxy 1.4.0.1 Windows Installer

   » ‎ Packet Storm Security Tools
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Windows installer.

  Tags:  installer proxy windows zed-attack security-experience testing-tool zap  

• 20:30

  Zed Attack Proxy 1.4.0.1 Windows Installer

   » ‎ Packet Storm Security Misc. Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Windows installer.

  Tags:  installer proxy windows zed-attack security-experience testing-tool zap  

• 20:29

  Zed Attack Proxy 1.4.0.1 Mac OS X Release

   » ‎ Packet Storm Security Recent Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Mac OS X release.

  Tags:  testing penetration proxy x-release mac-os zed-attack mac-os-x security-vulnerabilities security-experience  

• 20:29

  Zed Attack Proxy 1.4.0.1 Mac OS X Release

   » ‎ Packet Storm Security Tools
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Mac OS X release.

  Tags:  testing penetration proxy x-release mac-os zed-attack mac-os-x security-vulnerabilities security-experience  

• 20:29

  Zed Attack Proxy 1.4.0.1 Mac OS X Release

   » ‎ Packet Storm Security Misc. Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Mac OS X release.

  Tags:  testing penetration proxy x-release mac-os zed-attack mac-os-x security-vulnerabilities security-experience  

• 20:28

  Zed Attack Proxy 1.4.0.1 Linux Release

   » ‎ Packet Storm Security Recent Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Linux release.

  Tags:  proxy Release linux zed-attack security-vulnerabilities security-experience testing-tool  

• 20:28

  Zed Attack Proxy 1.4.0.1 Linux Release

   » ‎ Packet Storm Security Misc. Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Linux release.

  Tags:  proxy Release linux zed-attack security-vulnerabilities security-experience testing-tool  

• April 05, 2012
• 18:53

  Umbraco 4.x Open Proxy

   » ‎ Packet Storm Security Recent Files
  Vulnerable installations of Umbraco allow unauthenticated users to abuse the script FeedProxy.aspx into proxying requests on their behalf through the "url" parameter.

  Tags:  umbraco open proxy url-parameter aspx  

• 18:53

  Umbraco 4.x Open Proxy

   » ‎ Packet Storm Security Misc. Files
  Vulnerable installations of Umbraco allow unauthenticated users to abuse the script FeedProxy.aspx into proxying requests on their behalf through the "url" parameter.

  Tags:  umbraco open proxy url-parameter aspx  

• April 03, 2012
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• April 02, 2012
• 0:00

  Vuln: phpCAS Proxy Authorization Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Authorization Security Bypass Vulnerability

  Tags:  authorization phpcas proxy proxy-authorization vulnerability  

• March 20, 2012
• 17:15

  Proxy Check 02122011

   » ‎ Packet Storm Security Recent Files
  Proxy Check is a tool that includes a website to automate testing for web proxy content filtering. It has a battery of tests that includes looking for typically malicious URLs, several PDF exploits, and more.

  Tags:  tool check proxy proxy-check web-proxy exploits  

• 17:15

  Proxy Check 02122011

   » ‎ Packet Storm Security Tools
  Proxy Check is a tool that includes a website to automate testing for web proxy content filtering. It has a battery of tests that includes looking for typically malicious URLs, several PDF exploits, and more.

  Tags:  tool check proxy proxy-check web-proxy exploits  

• 17:15

  Proxy Check 02122011

   » ‎ Packet Storm Security Misc. Files
  Proxy Check is a tool that includes a website to automate testing for web proxy content filtering. It has a battery of tests that includes looking for typically malicious URLs, several PDF exploits, and more.

  Tags:  tool check proxy proxy-check web-proxy exploits  

• March 19, 2012
• 15:30

  at32 Reverse Proxy 1.060.310 Denial Of Service

   » ‎ Packet Storm Security Recent Files
  at32 Reverse Proxy version 1.060.310 suffers from multiple HTTP header field denial of service vulnerabilities.

  Tags:  denial service proxy reverse-proxy denial-of-service header-field  

• 15:30

  at32 Reverse Proxy 1.060.310 Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  at32 Reverse Proxy version 1.060.310 suffers from multiple HTTP header field denial of service vulnerabilities.

  Tags:  denial service proxy reverse-proxy denial-of-service header-field  

• March 12, 2012
• 0:00

  Vuln: Apache HTTP Server CVE-2011-3639 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server CVE-2011-3639 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server vulnerability  

• March 08, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• March 06, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• March 05, 2012
• 0:00

  Vuln: CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

  Tags:  cvs heap proxy buffer-overflow-vulnerability  

• February 22, 2012
• 0:00

  Vuln: Apache HTTP Server CVE-2011-3639 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server CVE-2011-3639 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server vulnerability  

• 0:00

  Vuln: CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

  Tags:  cvs heap proxy buffer-overflow-vulnerability  

• February 21, 2012
• 18:16

  DNSChef 0.1

   » ‎ Packet Storm Security Recent Files
  DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy (aka "Fake DNS") is a tool used for application network traffic analysis among other uses. For example, a DNS proxy can be used to fake requests for "badguy.com" to point to a local machine for termination or interception instead of a real host somewhere on the Internet.

  Tags:  dns proxy dnschef network-traffic-analysis penetration-testers application-network  

• 18:16

  DNSChef 0.1

   » ‎ Packet Storm Security Misc. Files
  DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy (aka "Fake DNS") is a tool used for application network traffic analysis among other uses. For example, a DNS proxy can be used to fake requests for "badguy.com" to point to a local machine for termination or interception instead of a real host somewhere on the Internet.

  Tags:  dns proxy dnschef network-traffic-analysis penetration-testers application-network  

• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• February 16, 2012
• 18:34

  Ubuntu Security Notice USN-1368-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1368-1 - It was discovered that the Apache HTTP Server incorrectly handled the SetEnvIf .htaccess file directive. An attacker having write access to a .htaccess file may exploit this to possibly execute arbitrary code. Prutha Parikh discovered that the mod_proxy module did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Various other issues were also addressed.

  Tags:  ubuntu proxy security apache-http-server external-exposure proxy-module  

• February 14, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• February 10, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• February 06, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• February 02, 2012
• 14:00

  [win32] - win32/xp sp2 ARABIC (ar) mechanism shellcode + proxy 500 bytes

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [win32] - win32/xp sp2 ARABIC (ar) mechanism shellcode + proxy 500 bytes

  Tags:  win mechanism arabic proxy  

• February 01, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• January 31, 2012
• 10:01

  Using Google documents as a web proxy

   » ‎ Hack a Day
  As weird as it might sound, there’s a way to use Google documents as a web proxy. The image above is a screenshot of [Antonio] demonstrating how he can view text data from any site through the web giant’s cloud applications. Certain sites may be blocked from your location, but the big G can load [...]

  Tags:  google web proxy antonio web-giant web-proxy big-g Software hacks  

• January 29, 2012
• 10:11

  Zorp Proxy Firewall Suite 3.9.3

   » ‎ Packet Storm Security Recent Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 10:11

  Zorp Proxy Firewall Suite 3.9.3

   » ‎ Packet Storm Security Tools
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 10:11

  Zorp Proxy Firewall Suite 3.9.3

   » ‎ Packet Storm Security Misc. Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• January 19, 2012
• 0:00

  Vuln: Squid Proxy Gopher Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy Gopher Remote Buffer Overflow Vulnerability

  Tags:  squid gopher proxy buffer-overflow-vulnerability remote-buffer-overflow-vulnerability squid-proxy  

• January 17, 2012
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability

  Tags:  proxy http apache apache-http-server server-mod vulnerability  

• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• January 12, 2012
• 14:21

  [Slides] Project Paraegis Round 2: Using Razorwire HTTP proxy to strengthen webapp session handling and reduce attack surface

   » ‎ SecDocs
  Tags: WAF
  Event: Black Hat EU 2006
  

  Tags:  project paraegis round black-hat proxy slides  

• December 29, 2011
• 6:59

  Pound Reverse HTTP Proxy 2.6

   » ‎ Packet Storm Security Recent Files
  Pound is a reverse HTTP proxy, load balancer, and SSL wrapper. It proxies client HTTPS requests to HTTP backend servers, distributes the requests among several servers while keeping sessions, supports HTTP/1.1 requests even if the backend server(s) are HTTP/1.0, and sanitizes requests.

  Tags:  http pound proxy backend-servers load-balancer proxies  

• 6:59

  Pound Reverse HTTP Proxy 2.6

   » ‎ Packet Storm Security Tools
  Pound is a reverse HTTP proxy, load balancer, and SSL wrapper. It proxies client HTTPS requests to HTTP backend servers, distributes the requests among several servers while keeping sessions, supports HTTP/1.1 requests even if the backend server(s) are HTTP/1.0, and sanitizes requests.

  Tags:  http pound proxy backend-servers load-balancer proxies  

• 6:59

  Pound Reverse HTTP Proxy 2.6

   » ‎ Packet Storm Security Misc. Files
  Pound is a reverse HTTP proxy, load balancer, and SSL wrapper. It proxies client HTTPS requests to HTTP backend servers, distributes the requests among several servers while keeping sessions, supports HTTP/1.1 requests even if the backend server(s) are HTTP/1.0, and sanitizes requests.

  Tags:  http pound proxy backend-servers load-balancer proxies  

• December 19, 2011
• 0:00

  Vuln: Squid Proxy Caching Server CNAME Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy Caching Server CNAME Denial of Service Vulnerability

  Tags:  squid caching proxy service-vulnerability denial-of-service  

• December 06, 2011
• 0:00

  Vuln: Squid Proxy Caching Server CNAME Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy Caching Server CNAME Denial of Service Vulnerability

  Tags:  squid caching proxy service-vulnerability denial-of-service  

• November 28, 2011
• 14:01

  New Siri hack controls your car

   » ‎ Hack a Day
  Siri can make appointments, tell you the weather, but now she can start your car as well! After we showed you how Siri could be hacked to use a custom proxy and execute custom commands, we knew it wouldn’t be long before additional hacks would start rolling in. [Brandon Fiquett] thought it would be great [...]

  Tags:  custom new car siri brandon-fiquett hacks proxy iphone  

• November 21, 2011
• 9:01

  Siri proxy adds tons of functionality, doesn’t require a jailbreak

   » ‎ Hack a Day
  [Pete] has an iPhone 4s and loves Siri, but he wishes she had some more baked-in capabilities. While the application is technically still in beta and will likely be updated in the near future, [Pete] wanted more functionality now. Since Apple isn’t known for their open architecture, he had to get creative. Knowing how Siri’s [...]

  Tags:  proxy doesn functionality siri pete open-architecture iphone jailbreak hacks  

• November 19, 2011
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• November 18, 2011
• 0:00

  Vuln: Squid Proxy Caching Server CNAME Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy Caching Server CNAME Denial of Service Vulnerability

  Tags:  squid caching proxy service-vulnerability denial-of-service  

• November 10, 2011
• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• October 31, 2011
• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• October 26, 2011
• 0:00

  Vuln: Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

  Tags:  squid web proxy web-proxy-cache service-vulnerability denial-of-service  

• 0:00

  Vuln: Squid Web Proxy Cache Authentication Header Parsing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Web Proxy Cache Authentication Header Parsing Remote Denial of Service Vulnerability

  Tags:  squid web proxy web-proxy-cache authentication-header service-vulnerability  

• 0:00

  Vuln: Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  squid string proxy service-vulnerability null-pointer denial-of-service  

• October 21, 2011
• 15:38

  Cyclope Internet Filtering Proxy 4.0 Denial Of Service

   » ‎ Packet Storm Security Exploits
  Cyclope Internet Filtering Proxy version 4.0 suffers from a denial of service vulnerability.

  Tags:  internet filtering cyclope service-vulnerability denial-of-service proxy  

• 15:38

  Cyclope Internet Filtering Proxy 4.0 Denial Of Service

   » ‎ Packet Storm Security Recent Files
  Cyclope Internet Filtering Proxy version 4.0 suffers from a denial of service vulnerability.

  Tags:  internet filtering cyclope service-vulnerability denial-of-service proxy  

• 15:38

  Cyclope Internet Filtering Proxy 4.0 Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  Cyclope Internet Filtering Proxy version 4.0 suffers from a denial of service vulnerability.

  Tags:  internet filtering cyclope service-vulnerability denial-of-service proxy  

• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• October 20, 2011
• 16:10

  Red Hat Security Advisory 2011-1392-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2011-1392-01 - The Apache HTTP Server is a popular web server. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker.

  Tags:  server proxy red uri internal-web-servers apache-http-server red-hat-security  

• 16:10

  Red Hat Security Advisory 2011-1392-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2011-1392-01 - The Apache HTTP Server is a popular web server. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker.

  Tags:  server proxy red uri internal-web-servers apache-http-server red-hat-security  

• 16:00

  Red Hat Security Advisory 2011-1391-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2011-1391-01 - The Apache HTTP Server is a popular web server. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker. It was discovered that mod_proxy_ajp incorrectly returned an "Internal Server Error" response when processing certain malformed HTTP requests, which caused the back-end server to be marked as failed in configurations where mod_proxy was used in load balancer mode. A remote attacker could cause mod_proxy to not send requests to back-end AJP servers for the retry timeout period or until all back-end servers were marked as failed.

  Tags:  server proxy http uri internal-web-servers internal-server-error apache-http-server  

• 16:00

  Red Hat Security Advisory 2011-1391-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2011-1391-01 - The Apache HTTP Server is a popular web server. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker. It was discovered that mod_proxy_ajp incorrectly returned an "Internal Server Error" response when processing certain malformed HTTP requests, which caused the back-end server to be marked as failed in configurations where mod_proxy was used in load balancer mode. A remote attacker could cause mod_proxy to not send requests to back-end AJP servers for the retry timeout period or until all back-end servers were marked as failed.

  Tags:  server proxy http uri internal-web-servers internal-server-error apache-http-server  

• 16:00

  Red Hat Security Advisory 2011-1391-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2011-1391-01 - The Apache HTTP Server is a popular web server. It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to the attacker. It was discovered that mod_proxy_ajp incorrectly returned an "Internal Server Error" response when processing certain malformed HTTP requests, which caused the back-end server to be marked as failed in configurations where mod_proxy was used in load balancer mode. A remote attacker could cause mod_proxy to not send requests to back-end AJP servers for the retry timeout period or until all back-end servers were marked as failed.

  Tags:  server proxy http uri internal-web-servers internal-server-error apache-http-server  

• October 19, 2011
• 21:00

  [remote exploits] - Cyclope Internet Filtering Proxy - Stored XSS Vuln

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [remote exploits] - Cyclope Internet Filtering Proxy - Stored XSS Vuln

  Tags:  internet filtering cyclope exploits proxy  

• October 11, 2011
• 9:04

  File Disclosure Browser – Tool To Explore .DS_Store Files

   » ‎ Darknet
  The File Disclosure Browser takes .DS_Store files found on websites and parses through them to find a list of all potential files in the directory. It can then either just display the URLs for the files or if you give it a proxy it can browse to the files itself. The author wrote it after [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  disclosure file browser read darknet proxy forensics  

• 0:00

  Vuln: Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

  Tags:  proxy http apache information-disclosure-vulnerability apache-http-server server-mod  

• October 10, 2011
• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Exploits
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Recent Files
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Misc. Files
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 14:00

  [remote exploits] - Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [remote exploits] - Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC

  Tags:  mod proxy apache exploits vulnerability  

• October 06, 2011
• 12:29

  Apache Reverse Proxy Bypass

   » ‎ Packet Storm Security Exploits
  Context discovered a security vulnerability which allows for Apache in reverse proxy mode to be used to access internal/DMZ systems due to a weakness in its handling of URLs being processed by mod_rewrite. Versions 1.3 and 2.x are affected.

  Tags:  bypass proxy apache proxy-bypass security-vulnerability proxy-mode  

• 12:29

  Apache Reverse Proxy Bypass

   » ‎ Packet Storm Security Recent Files
  Context discovered a security vulnerability which allows for Apache in reverse proxy mode to be used to access internal/DMZ systems due to a weakness in its handling of URLs being processed by mod_rewrite. Versions 1.3 and 2.x are affected.

  Tags:  bypass proxy apache proxy-bypass security-vulnerability proxy-mode  

• 12:29

  Apache Reverse Proxy Bypass

   » ‎ Packet Storm Security Misc. Files
  Context discovered a security vulnerability which allows for Apache in reverse proxy mode to be used to access internal/DMZ systems due to a weakness in its handling of URLs being processed by mod_rewrite. Versions 1.3 and 2.x are affected.

  Tags:  bypass proxy apache proxy-bypass security-vulnerability proxy-mode  

• October 05, 2011
• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Advisories
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Recent Files
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Misc. Files
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• September 14, 2011
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp wildcard-characters vulnerability  

• September 12, 2011
• 0:00

  Vuln: Squid Proxy Gopher Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy Gopher Remote Buffer Overflow Vulnerability

  Tags:  squid gopher proxy buffer-overflow-vulnerability remote-buffer-overflow-vulnerability squid-proxy  

• September 07, 2011
• 0:00

  Vuln: Squid Proxy Gopher Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy Gopher Remote Buffer Overflow Vulnerability

  Tags:  squid gopher proxy buffer-overflow-vulnerability remote-buffer-overflow-vulnerability squid-proxy  

• August 29, 2011
• 0:00

  Vuln: Squid Proxy Gopher To HTML Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy Gopher To HTML Remote Buffer Overflow Vulnerability

  Tags:  squid gopher proxy buffer-overflow-vulnerability remote-buffer-overflow-vulnerability remote-buffer-overflow  

• August 24, 2011
• 7:17

  Zorp Proxy Firewall Suite 3.9.2

   » ‎ Packet Storm Security Recent Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 7:17

  Zorp Proxy Firewall Suite 3.9.2

   » ‎ Packet Storm Security Tools
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• 7:17

  Zorp Proxy Firewall Suite 3.9.2

   » ‎ Packet Storm Security Misc. Files
  Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

  Tags:  firewall zorp proxy proxy-firewall core-architecture policy-decisions  

• August 22, 2011
• 7:45

  FHTTP Attack Tool 1.3

   » ‎ Packet Storm Security Recent Files
  This is a framework for HTTP related attacks. It is written in Perl with a GTK interface, has a proxy for debugging and manipulation, proxy chaining, evasion rules, and more.

  Tags:  attack proxy fhttp gtk-interface tool-1 evasion  

• 7:45

  FHTTP Attack Tool 1.3

   » ‎ Packet Storm Security Tools
  This is a framework for HTTP related attacks. It is written in Perl with a GTK interface, has a proxy for debugging and manipulation, proxy chaining, evasion rules, and more.

  Tags:  attack proxy fhttp gtk-interface tool-1 evasion  

• 7:45

  FHTTP Attack Tool 1.3

   » ‎ Packet Storm Security Misc. Files
  This is a framework for HTTP related attacks. It is written in Perl with a GTK interface, has a proxy for debugging and manipulation, proxy chaining, evasion rules, and more.

  Tags:  attack proxy fhttp gtk-interface tool-1 evasion  

• 7:10

  tor2web Web Proxy 2.0

   » ‎ Packet Storm Security Recent Files
  tor2web is a web proxy tool that promotes the use of Tor hidden services. It is based on the Glype web proxy and is meant to protect publishers.

  Tags:  tor web proxy web-proxy publishers  

• 7:10

  tor2web Web Proxy 2.0

   » ‎ Packet Storm Security Tools
  tor2web is a web proxy tool that promotes the use of Tor hidden services. It is based on the Glype web proxy and is meant to protect publishers.

  Tags:  tor web proxy web-proxy publishers  

• 7:10

  tor2web Web Proxy 2.0

   » ‎ Packet Storm Security Misc. Files
  tor2web is a web proxy tool that promotes the use of Tor hidden services. It is based on the Glype web proxy and is meant to protect publishers.

  Tags:  tor web proxy web-proxy publishers  

• July 15, 2011
• 0:00

  Vuln: Apache Mod_Proxy Remote Negative Content-Length Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache Mod_Proxy Remote Negative Content-Length Buffer Overflow Vulnerability

  Tags:  mod proxy apache buffer-overflow-vulnerability negative-content content-length  

• June 23, 2011
• 0:00

  Vuln: Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

  Tags:  proxy mod apache information-disclosure-vulnerability  

• June 20, 2011
• 10:46

  Zed Attack Proxy – ZAProxy v1.3.0 Released – Integrated Penetration Testing Tool

   » ‎ Darknet
  It’s been a while since the last time we wrote about the OWASP ZAP – Zed Attack Proxy for Web Application Penetration Testing, back in October 2010. ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  testing penetration proxy read zed-attack owasp testing-tool darknet hacking Tools  

• April 26, 2011
• 3:25

  OWASP Hatkit Proxy Project – HTTP/TCP Intercepting Proxy Tool

   » ‎ Darknet
  The primary purpose of the Hatkit Proxy is to create a minimal, lightweight proxy which stores traffic into an offline storage where further analysis can be performed, i.e. all kinds of analysis which is currently implemented by the proxies themselves (WebScarab/Burp/Paros etc). Also, since the http traffic is stored in a MongoDB, the traffic is...
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  hatkit traffic proxy read offline-storage darknet proxies hacking Tools  

• April 10, 2011
• 12:47

  Sec-Wall Security Proxy 1.0.0

   » ‎ Packet Storm Security Recent Files
  sec-wall is a high-performance security proxy that supports SSL/TLS, WS-Security, HTTP Auth Basic/Digest, extensible authentication schemes based on custom HTTP headers and XPath expressions, powerful URL matching/rewriting, and an optional header enrichment. It's a security wall with which you can conveniently fence otherwise defenseless backend servers.

  Tags:  http proxy security sec-wall xpath-expressions security-proxy authentication-schemes  

• 12:47

  Sec-Wall Security Proxy 1.0.0

   » ‎ Packet Storm Security Misc. Files
  sec-wall is a high-performance security proxy that supports SSL/TLS, WS-Security, HTTP Auth Basic/Digest, extensible authentication schemes based on custom HTTP headers and XPath expressions, powerful URL matching/rewriting, and an optional header enrichment. It's a security wall with which you can conveniently fence otherwise defenseless backend servers.

  Tags:  http proxy security sec-wall xpath-expressions security-proxy authentication-schemes  

• February 22, 2011
• 0:00

  Vuln: phpCAS CAS Proxy Mode Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  phpCAS CAS Proxy Mode Cross-Site Scripting Vulnerability

  Tags:  cas phpcas proxy proxy-mode cross-site-scripting vulnerability  

• February 16, 2011
• 11:22

  yCrawler Web Crawling Utility

   » ‎ Packet Storm Security Recent Files
  YCrawler is a web crawler that is useful for grabbing all user supplied input related to a given website and will save the output. It has proxy and log file support.

  Tags:  ycrawler web crawling web-crawler proxy  

• 11:22

  yCrawler Web Crawling Utility

   » ‎ Packet Storm Security Tools
  YCrawler is a web crawler that is useful for grabbing all user supplied input related to a given website and will save the output. It has proxy and log file support.

  Tags:  ycrawler web crawling web-crawler proxy  

• 11:22

  yCrawler Web Crawling Utility

   » ‎ Packet Storm Security Misc. Files
  YCrawler is a web crawler that is useful for grabbing all user supplied input related to a given website and will save the output. It has proxy and log file support.

  Tags:  ycrawler web crawling web-crawler proxy  

• February 07, 2011
• 23:55

  Proxocket – DLL Proxy For Winsock

   » ‎ Darknet
  Proxocket is a dll proxy project for the main Winsock functions which allows to capture any type of packet and data sent/received by a specific software of your choice and optionally modifying its content or the connect, bind and accept functions through a custom dll very easy to create. Proxocket handles the following functions for [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  proxocket dll proxy read winsock-functions darknet specific-software hacking Tools  

• December 10, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• December 09, 2010
• 0:00

  Vuln: Apache 'mod_proxy' Remote Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy' Remote Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service  

• December 06, 2010
• 13:50

  Zed Attack Proxy (ZAP) 1.1.0

   » ‎ Packet Storm Security Recent Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Mac OS X, Windows and Cross Platform releases are all included in this file.

  Tags:  zap penetration proxy mac-os zed-attack security-vulnerabilities mac-os-x security-experience  

• 13:50

  Zed Attack Proxy (ZAP) 1.1.0

   » ‎ Packet Storm Security Misc. Files
  The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. Mac OS X, Windows and Cross Platform releases are all included in this file.

  Tags:  zap penetration proxy mac-os zed-attack security-vulnerabilities mac-os-x security-experience  

• November 15, 2010
• 7:18

  Sophos Offers Overkill Solution For Firesheep

   » ‎ Packet Storm Security Headlines
  Maybe it's just too early in the morning, but this article confuses me. Sophos is telling people to tunnel a proxy over SSH in order to mitigate the chances of getting nabbed by Firesheep. This is all well and good but why go through all that extra trouble? If you have the ability to SSH into a host that you trust, just use it with -D port_number and use that as your SOCKS proxy in your Firefox configuration. For all the people out there that are actually shaken by Firesheep, it's probably worth noting that this plug-in does not demonstrate any new vulnerability.

  Tags:  proxy sophos firesheep socks ssh vulnerability  

• November 10, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• November 08, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• 0:00

  Vuln: phpCAS CAS Proxy Mode Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  phpCAS CAS Proxy Mode Cross-Site Scripting Vulnerability

  Tags:  cas phpcas proxy proxy-mode cross-site-scripting vulnerability  

• October 28, 2010
• 0:00

  Vuln: Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability

  Tags:  proxy mod apache information-disclosure-vulnerability  

• October 25, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• October 22, 2010
• 17:02

  pyproxy-v.09.tar.gz

   » ‎ Packet Storm Security Misc. Files
  PyProxy Proxy Hunter and Tester version 9 high-level cross protocol proxy-hunter python library.

  Tags:  pyproxy tar proxy python-library proxy-hunter level-cross  

• 17:02

  pyproxy-v.09.tar.gz

   » ‎ Packet Storm Security Recent Files
  PyProxy Proxy Hunter and Tester version 9 high-level cross protocol proxy-hunter python library.

  Tags:  pyproxy tar proxy python-library proxy-hunter level-cross  

• October 19, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• October 18, 2010
• 0:00

  Vuln: Apache 'mod_proxy' Remote Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy' Remote Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service  

• October 14, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• September 22, 2010
• 0:00

  Vuln: Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  squid string proxy service-vulnerability null-pointer denial-of-service  

• September 20, 2010
• 23:01

  n.runs-SA-2010.002.txt

   » ‎ Packet Storm Security Recent Files
  Part of the Alcatel Omnivista 4760 administration software of the Alcatel 4400 PBX is an HTTP proxy. It is used to tunnel ssh-connections to the ssh-ports of the PBX within the internal network. This proxy is vulnerable to a remote buffer overflow.

  Tags:  proxy pbx alcatel remote-buffer-overflow alcatel-4400 ssh-ports  

• 23:00

  n.runs-SA-2010.002.txt

   » ‎ Packet Storm Security Advisories
  Part of the Alcatel Omnivista 4760 administration software of the Alcatel 4400 PBX is an HTTP proxy. It is used to tunnel ssh-connections to the ssh-ports of the PBX within the internal network. This proxy is vulnerable to a remote buffer overflow.

  Tags:  proxy pbx alcatel remote-buffer-overflow alcatel-4400 ssh-ports  

• 0:00

  Vuln: Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  squid string proxy service-vulnerability null-pointer denial-of-service  

• September 16, 2010
• 0:00

  Vuln: Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  squid string proxy service-vulnerability null-pointer denial-of-service  

• September 15, 2010
• 0:00

  Vuln: Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  squid string proxy service-vulnerability null-pointer denial-of-service  

• September 14, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• September 03, 2010
• 0:00

  Vuln: Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

  Tags:  proxy mod apache information-disclosure-vulnerability timeout  

• August 05, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• July 01, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• June 15, 2010
• 20:00

  modproxyhttp-timeout.txt

   » ‎ Packet Storm Security Advisories
  A timeout detection flaw in the httpd mod_proxy_http module causes proxied response to be sent as the response to a different request, and potentially served to a different client, from the HTTP proxy pool worker pipeline.

  Tags:  proxy http response timeout pipeline httpd  

• June 09, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• June 03, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• May 26, 2010
• 0:00

  Vuln: Apache 'mod_proxy_ftp' Undefined Charset UTF-7 Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Undefined Charset UTF-7 Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp charset vulnerability  

• 0:00

  Vuln: Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp wildcard-characters vulnerability  

• 0:00

  Vuln: Apache 'mod_proxy_balancer' Multiple Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_balancer' Multiple Vulnerabilities

  Tags:  proxy mod apache vulnerabilities  

• May 11, 2010
• 0:00

  Vuln: Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability interim-response denial-of-service  

• May 07, 2010
• 9:50

  [Audio] Proxy Prank-o-Matic

   » ‎ SecDocs
  Authors: Charlie Vedaa
  Tags: MITM
  Event: DEFCON 17
  

  Tags:  audio prank-o proxy charlie-vedaa  

• 9:50

  [Slides] Proxy Prank-o-Matic

   » ‎ SecDocs
  Authors: Charlie Vedaa
  Tags: MITM
  Event: DEFCON 17
  

  Tags:  prank-o proxy matic charlie-vedaa slides  

• 9:50

  [Video] Proxy Prank-o-Matic

   » ‎ SecDocs
  Authors: Charlie Vedaa
  Tags: MITM
  Event: DEFCON 17
  

  Tags:  video prank-o proxy charlie-vedaa  

• May 04, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• April 26, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• April 23, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• April 19, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• April 08, 2010
• 19:00

  mitmproxy-0.2.tar.gz

   » ‎ Packet Storm Security Tools
  MITMProxy is an interactive, SSL-aware HTTP proxy that allows viewing, modification and replaying of requests.

  Tags:  mitmproxy tar ssl-aware tar-gz proxy  

• 19:00

  mitmproxy-0.2.tar.gz

   » ‎ Packet Storm Security Recent Files
  MITMProxy is an interactive, SSL-aware HTTP proxy that allows viewing, modification and replaying of requests.

  Tags:  mitmproxy tar ssl-aware tar-gz proxy  

• April 01, 2010
• 8:36

  OpenVAS NTV Sync plugin updates

   » ‎ remote-exploit & backtrack
  I'm having a problem updating it
  It says "Error: rsync failed. Your NVT collection might be broken now."
  Firewall? ..I'm using a domain for downloads, and that's blocking me.. How can i define the proxy in the Konsole, like I had to do on Firefox?
  
  Ty

  Tags:  quot openvas ntv konsole proxy sync Pentesting  

• March 29, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• March 26, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• March 25, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• March 19, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• March 12, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• March 11, 2010
• 0:00

  Vuln: Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 'mod_proxy_ftp' Wildcard Characters Cross-Site Scripting Vulnerability

  Tags:  proxy mod apache proxy-ftp wildcard-characters vulnerability  

• March 10, 2010
• 0:00

  Vuln: Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability denial-of-service request-body  

• 0:00

  Vuln: Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

  Tags:  squid web proxy web-proxy-cache service-vulnerability denial-of-service  

• March 09, 2010
• 10:00

  Bugtraq: Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass

   » ‎ SecurityFocus Vulnerabilities
  Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass

  Tags:  Wireless ftp promiscuous apple-airport bugtraq proxy  

• 0:00

  Vuln: Symantec Client Proxy ActiveX Control Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Symantec Client Proxy ActiveX Control Buffer Overflow Vulnerability

  Tags:  client symantec proxy buffer-overflow-vulnerability client-proxy  

• March 04, 2010
• 10:01

  Bugtraq: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass

   » ‎ SecurityFocus Vulnerabilities
  Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass

  Tags:  Wireless ftp promiscuous apple-airport bugtraq proxy  

• March 01, 2010
• 16:00

  Evil Proxy Server

   » ‎ darkc0de
  Evil Proxy Server

  Tags:  server proxy evil proxy-server  

• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability  

• 0:00

  Vuln: Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

  Tags:  squid web proxy web-proxy-cache service-vulnerability denial-of-service  

• February 27, 2010
• 4:42

  Help proxy in backtrack

   » ‎ remote-exploit & backtrack
  Hi..
  I hv just installed backtrack4 in virtual box..
  I can use internet with bt4..
  In win xp i hv a proxy software which always promt me to choose a proxy server(which i hv previously defined.) when i start any internet based application(eg. Telnet,ftp,any internet browser etc.)..
  Is there any kind of apps in bt4 which will let me allow to use socks proxy server like the above or nearly above..

  Tags:  internet proxy BackTrack virtual-box bt4 proxy-software Newbie Area  

• February 26, 2010
• 0:00

  Vuln: Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

  Tags:  squid web proxy web-proxy-cache service-vulnerability denial-of-service  

• February 24, 2010
• 0:00

  Vuln: Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability

  Tags:  squid web proxy web-proxy-cache service-vulnerability denial-of-service  

• February 19, 2010
• 0:00

  Vuln: Symantec Client Proxy ActiveX Control Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Symantec Client Proxy ActiveX Control Buffer Overflow Vulnerability

  Tags:  client symantec proxy buffer-overflow-vulnerability client-proxy  

• February 17, 2010
• 20:00

  admin finder with proxy support

   » ‎ darkc0de
  admin finder with proxy support

  Tags:  finder proxy admin proxy-support  

• February 14, 2010
• 23:00

  18 Proxy t00lz

   » ‎ darkc0de
  18 Proxy t00lz

  Tags:  proxy  

• February 04, 2010
• 0:00

  Vuln: Squid Web Proxy Cache Authentication Header Parsing Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Squid Web Proxy Cache Authentication Header Parsing Remote Denial of Service Vulnerability

  Tags:  squid web proxy web-proxy-cache authentication-header service-vulnerability  

• February 01, 2010
• 19:00

  Squipy.zip

   » ‎ Packet Storm Security Tools
  Squipy is a proxy server that allows you to capture and modify HTTP traffic.

  Tags:  squipy proxy zip proxy-server traffic  

• January 28, 2010
• 1:57

  PLZ Help

   » ‎ remote-exploit & backtrack
  I'm looking for program to change my Proxy every minute.
  
  can you.

  Tags:  plz program proxy Programming  

• 0:00

  Vuln: Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache 1.3 mod_proxy HTTP Chunked Encoding Integer Overflow Vulnerability

  Tags:  proxy mod apache integer-overflow-vulnerability  

• January 27, 2010
• 12:00

  modproxy-overflow.txt

   » ‎ Packet Storm Security Recent Files
  Mod_proxy from Apache 1.3 suffers from an integer overflow. Full details and proof of concept provided.

  Tags:  txt proxy mod integer-overflow proof-of-concept  

• 12:00

  modproxy-overflow.txt

   » ‎ Packet Storm Security Exploits
  Mod_proxy from Apache 1.3 suffers from an integer overflow. Full details and proof of concept provided.

  Tags:  txt proxy mod integer-overflow proof-of-concept  

• 9:33

  Bugtraq: Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.

   » ‎ SecurityFocus Vulnerabilities
  Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.

  Tags:  proxy overflow mod integer-overflow heap  

• January 26, 2010
• 4:39

  Linksys WRT54GL Add Proxy Function?

   » ‎ remote-exploit & backtrack
  Hey!
  
  Since Linksys WRT54GL Routers are Linux based and SSH / Telnet AND Remote Connection to the device is possible, I asked myself if it wouldn't be possible to add some proxy function to this device, so that it proceeds every request from outside.
  
  So the main idea is to write a script that proceeds every request, copy it to the router, make it executable and execute it once so that it is present until the router is restarted (or better copy it into the routers autostart?)
  
  Unfortunately, I have no idea to start, but I would be pleased about every input you have :)

  Tags:  proxy wrt linksys ssh-telnet autostart routers Programming  

• January 25, 2010
• 0:00

  Vuln: Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  proxy mod apache service-vulnerability proxy-ftp null-pointer  

• 0:00

  Vuln: Apache mod_proxy_ftp Remote Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache mod_proxy_ftp Remote Command Injection Vulnerability

  Tags:  proxy mod apache proxy-ftp vulnerability