Security Basics mailing list archives
Proxy detecting script
From: knowthebird () gmail com
Date: 4 Sep 2006 05:33:13 -0000
I recently wrote a script that can be used to try and detect if a user is connecting to the page hosting it with a proxy. It tries to pick up cgi proxies, http and socks proxies, and tor servers. It could be edited to restrict access to a pages like login pages where the enemy :-) might try to use proxies to brute force the password or for flood control. Its alot more successful than most proxy detectors that I've seen, but it has not had much testing so some browsers and anything that is not a browser connecting to it might show up as proxies. If you find a browser it thinks is a proxy please let me know. The scripts (two of them, first quick and misses stuff, second slower but picks up a lot more) and source at: http://testing.xeepo.com/ --------------------------------------------------------------------------- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- Proxy detecting script knowthebird (Sep 05)
- <Possible follow-ups>
- Re: Proxy detecting script molshoop (Sep 06)
- Re: Re: Proxy detecting script knowthebird (Sep 07)
- Re: Re: Proxy detecting script RS (Sep 13)