full-disclosure - Re: pixlr.com bluecoat image file bypass

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 09 Aug 2013 09:45:58 +0200
From: Alex <fd@...oo.de>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: pixlr.com bluecoat image file bypass



its called proxy chaining/tunneling and you can setup your own proxy to
bypass your company's proxy using
https://code.google.com/p/phproxyimproved/ [3] or similar. 

Am 2013-08-08 18:27, schrieb debug: 

> if one is confined to the bluecoat (bluecoat.com) proxysg, the
> pixlr.com/editor page allows him or her to bypass the proxy to
> download arbitrary images from any source assuming the pixlr.com
> servers have access themselves to retrieve the image.
> 
> donations to btc: 1CGw4gpZGZkpQeUMg7s6ip3hp8ZRj9pTGx
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html [1]
> Hosted and sponsored by Secunia - http://secunia.com/ [2]



Links:
------
[1] http://lists.grok.org.uk/full-disclosure-charter.html
[2] http://secunia.com/
[3] https://code.google.com/p/phproxyimproved/

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/