Re: [hackers-se] Proxy that can manage session cookies?

From: Kristian Franzen (krfr_at_balsna.mine.nu)
Date: 11/26/04

  • Next message: Jerry Shenk: "RE: Citrix" 
    Date: Fri, 26 Nov 2004 08:27:46 +0100 (CET)
To: "Rikard Carlsson" <rikard.carlsson@ixsecurity.com>

    Rickard,

    I'm not sure if youre looking for a client side proxy, such as achilles or
    paros to aid your tests, or a regular server based one. The new MS ISA
    2004 is one example of a server based proxy that manage cookie
    authentication thtough what MS calls 'forms authentication'. Though, as
    mentioned, I'm not sure if that was the question or not.

    /Kristian

    > Hi All!
    >
    > Do any of you know of a proxy that can manage cookie based
    > authentication in webapps?
    >
    > I going to test a webapp that when authenticated the user get a session
    > cookie. If the users make an invalid request (URLs that don’t exists
    > etc), the cookie goes bad and the user has to reauthenticate again.
    >
    > So I need a proxy that could check that the cookie is ok, otherwise
    > re-authenticate, for every request otherwise it would take ages to test
    > this app.
    >
    > Cheers
    >
    > Rikard
    > _______________________________________________
    > hackers-se mailing list
    > hackers-se@cqure.net
    > http://mailman.smufsa.nu/mailman/listinfo/hackers-se
    >

  • Next message: Jerry Shenk: "RE: Citrix"

    Relevant Pages

    • Re: Proxy server with HttpListener
      ... class using sockets that will write the authentication details to your ... that captured HTTP request to your company proxy. ... How can I send the HttpListenerRequest to the internet and put the ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: httpwebrequest with https behind proxy with authentication
      ... contact Microsoft Customer Support ... httpwebrequest with https behind proxy with authentication ... Our proxy server uses NTLM authentication and as you suggested I ...
      (microsoft.public.dotnet.framework)
    • RE: HttpWebRequest over Https Via Proxy Fails using NTLM
      ... request a resource over HTTPS is failing following the installation of a new ... proxy server on our internal network with 407 Proxy Authentication Required. ... Is there any way to debug the ntlm authentication module to see exactly what ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Wi-fi hotspot implementations
      ... FreeBSD, using php and mysql for the authentication, squid for the ... have authenticated full access through the proxy. ... This strikes me as a bit of overkill for a coffee shop. ... Proxy servers are nice for security and anonymity, ...
      (alt.internet.wireless)
    • Re: httpwebrequest with https behind proxy with authentication
      ... Our proxy server uses NTLM authentication and as you suggested I modified the code as follows: ... I still receive "The remote server returned an error: Proxy Authentication Required." ... and it works if I use http instead of https or if I disable authentication on the proxy ... Microsoft MSDN Online Support Lead ...
      (microsoft.public.dotnet.framework)