7 matches found
DatajackProxy
Datajack Proxy Datajack Proxyは、ネイティブアプリケーションとサーバー間の非HTTPトラフィックを傍受するツールです。これにより、暗号化や証明書ピンニングが使用されていても、通信の傍受と改変が可能になります。これは、アプリケーションをフックし、一般的なソケットおよびTLSライブラリへの呼び出しを傍受して、暗号化前（送信時）および復号化後（受信時）のデータを読み取ることで実現されます。 これは、Frida APIを使用してネイティブプロセスにJavaScriptを注入することで実現されます。 特徴 プロセスへの注入...
Fortinet FortiGate 安全漏洞
Fortinet FortiGate is a suite of network security platforms from the American company Fiat Fortinet. The platform provides firewall, antivirus and intrusion prevention IPS, application control, anti-spam, wireless controller, and WAN acceleration. A security vulnerability exists in FortiGate. The...
Vulnerability fixed in FortiGate
Fortinet has fixed a vulnerability in FortiGate. The vulnerability allows an unauthenticated remote malicious person potentially able to bypass the proxy by sending non-HTTPS traffic such as SSH to port 80/443 of FortiGate. Fortinet has released updates to fix the vulnerability in FortiGate 6.4.3...
Protect
When traffic other than HTTP/S eg: SSH traffic, etc... traverses the FortiOS on port 80/443, it is not redirected to the transparent proxy policy for processing, as it doesn't have a valid HTTP header...
Non-HTTP Traffic over HTTP Port
Several ports are usually used to transfer HTTP traffic. Non-HTTP traffic over these ports may be used for malicious purposes...
