Security Basics mailing list archives

Proxy detecting script


From: knowthebird () gmail com
Date: 4 Sep 2006 05:33:13 -0000

I recently wrote a script that can be used to try and detect if a user is connecting to the page hosting it with a 
proxy.  It tries to pick up cgi proxies, http and socks proxies, and tor servers.  It could be edited to restrict 
access to a pages like login pages where the enemy :-) might try to use proxies to brute force the password or for 
flood control.  Its alot more successful than most proxy detectors that I've seen, but it has not had much testing so 
some browsers and anything that is not a browser connecting to it might show up as proxies.  If you find a browser it 
thinks is a proxy please let me know.

The scripts (two of them, first quick and misses stuff, second slower but picks up a lot more) and source at:

http://testing.xeepo.com/

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: