[W3af-svn-notify] [Task #145788] reverse proxy?

[SourceForge.net <no...@so...>]

Task #145788 has been updated. 

Project: w3af
Subproject: Plugin TODO v1.10
Summary: reverse proxy?
Complete: 40%
Status: Open
Authority  : andresriancho
Assigned to: nobody

Description: I got this Header:

Via: 1.1 AN-0016020122533441

is it a reverse proxy?

Follow-Ups:

-------------------------------------------------------
Date: 2008-01-31 22:11
By: andresriancho

Comment:
hacking exposed web applications, 2nd ed talks about fingerprinting reverse proxies

-------------------------------------------------------
Date: 2008-01-31 21:40
By: andresriancho

Comment:
The reverse proxy detection plugin is ready, but it only checks for the 'Via' header, what I want to do now is:

- maybe I could CONNECT to the "Host:" that the proxy expects, if the connection succeeds then I know it has a proxy. if the CONNECT fails, then I can't say that there is no reverse proxy; I just can say that CONNECT didn't worked

- is there a chance of getting say Apache's mod_proxy to error out on a header only a proxy would need to parse and not pass the request on to whatever is behind it?


-------------------------------------------------------
For more info, visit:

http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=145788&group_id=170274&group_project_id=55629