Penetration Testing mailing list archives

Re: HTTP Proxy Question


From: jfvanmeter () comcast net
Date: Mon, 16 Mar 2009 06:40:23 +0000 (UTC)

Thank you and yes it was a user right with how I was trying the test. I got it to work yesterday.

Take Care //John

----- Original Message -----
From: "τ∂υƒιφ *" <tas0584 () gmail com>
To: jfvanmeter () comcast net
Cc: pen-test () securityfocus com
Sent: Monday, March 16, 2009 12:49:22 AM GMT -05:00 US/Canada Eastern
Subject: Re: HTTP Proxy Question

Hey,

Can you be more precise with the error you are getting? I mean the
error number or the correct error message. I hope your browsers are
pointing to right IP's & ports of the proxy. Also make sure you
uncheck the localhost option in both IE & f

--
Taufiq Ali
http://www.niiconsulting.com/products/iso_toolkit.html


2009/3/13 <jfvanmeter () comcast net>

Hello Everyone, I have a assessment on a application that installs a web server, uses a web broser as the user 
interfacer.

I've tried to monitor the connectioning using Burp, Feddler 2, TamperIE, and Firefox/HTTPFox. I"m going to try 
webscarab tonight.

When I start the proxy, it monitors traffic over port 80 and port 443 to the internet with out any problems.

When I start IE7 or Firefox, the proxy shows the start of the connection, but the browse shows that it can not 
connect to the server.

The urls are https://mycomputername:portnumber

Are the proxies failing to redirect the browser output back to the mycomputername so the connection fails?

Thanks //John



------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------


Current thread: