WebApp Sec mailing list archives

Re: stacking proxies


From: Robin Wood <robin () digininja org>
Date: Sun, 1 Jan 2012 15:09:50 +0000

On 1 January 2012 11:24, BookBag <asaad2 () gmail com> wrote:
I tunnel everything thru tor. But be careful as DNS requests sometimes are
done thru your IP. So its best to get your ip's thru any proxy and do the
tests thru tor after you've got your ip's

Most of my clients like to know where the attack will be coming from
so they can monitor it in their logs. I do some attacks through either
tor or from a different IP so I can see if they have enabled/disabled
anything special for the IP I told them I was using.

Robin

On Jan 1, 2012 1:29 AM, "Robin Wood" <robin () digininja org> wrote:

I watched Jason Haddix talk at BruCon and he talked about stacking
proxy servers when doing web app tests so that you could get the best
out of each one.

I've been meaning to ask for a while, what proxies do people use when
stacking and in what order?

Robin



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now!
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------





This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------


Current thread: