Hi and welcome back to the Deep dive into
Network. Assessment by Issa console. This is
section for advanced network security
techniques. In this video will be
discussing on how to identify an SS reverse
proxy mechanisms. So that size
one in so probably wondering what exactly is a
reverse proxy to put. Simply
renew a proxy is simply a type of silver or
a device that sits between internal Network.
And let's see the internet. We have
the four proxy, which we commonly know with something,
the seps on Fulton tuna client requests,
how to interact or ever. A
reverse proxy simply follow the
traffic in the reverse Direction just confusing, right?
So the reverse proxy will simply
in this up. And follow request from assistant
that is located on an external networks,
such as Internet and forward.
Just want to do that to it or a device on
the internal Network. For example, you
can have a reverse proxy is configured and it's
implemented between internet and silver Cydia
for. Let's say, for example, that you
are visiting web server. Your traffic will
reach it from your computer and it will hit
the reverse proxy. To reverse proxy will simply
Interceptor traffic, inspect it and
forward it to the internal web server. That's a
cool thing about using a reverse proxy. However, detecting
identifying a
reverse proxy is sometimes easy, depending
on the security mechanisms implemented by
the owner of the reverse proxy. So,
in this video will take a tool to
help us identify whether it is a reverse proxy or even
a web application firewall does sitting before,
or in front of a web server to
get a better understanding. Let's take a look at it.
Because there's a pretty cool too. You can use
this tool is known as life
wolf actually. So let's
click on applications here. Let's type
1 and W 00. S
unlock the tool is right here.
So let me maximize assaulted at 3 to see whether
and what is Sewell does. It's simply check
to see whether it is a web application or any
sort of proxies between us
as the sandal on
sale at Target as being
a web application with web application web server.
This tool is very, very easy to use house.
You can see the usage is simply specifying get
to named followed by a URL or
even multiple URLs. So, what
we can do is let's copy the name of the two.
Let's specify a URL such
as www.microsoft.com. So
that's a vendor and it
should take a few seconds to actually complete.
Okay. So let's see. It was checking. It
should u p s colon slash
slash www.pandora.com it seem
to bump into some type of car here. But look
at us down here. It says a site https colon slash
slash www.alcorn.edu waffle,
some
sort of security solution. So this
is a simple indication of game, maybe a
reverse proxy, or even a web application,
firewall, the sitting behind or Target website
on the internet. Reason, for
blocking candy to, to Let's a
pocket, level filtering. Let's try one of
the site as well. So that's it up. Together, history
on a tray Google.
Like soap on accidental once more,
it will take just a few seconds to complete and provide
us with the results.
I'll look at it. It is something else. There's no
web application, firewall detected by generic
detection. Now they may
be a possibility that there are security mechanisms protecting
Google website. However, this tool
perhaps was unable to detect it. Something about
detecting reverse proxies and sometime. Well
application files due to the security mechanisms.
It's more like a hit-or-miss. We
may be able to detect it or me or
be able to detect whether there's a reverse proxy or
even a web application firewall. In this
video. We took a look at understanding. What is
the need advice of a reverse proxy and
how it is typically use on internet through
the movie. Look at identifying an assassin, reverse
proxy, mechanisms using the cool on
sort of funny, wife with two.
Is Alex with you? We'll take a look at identifying subsystems.
I hope this video has been
informative for you, and I will see you in the next one.