https://insinuator.net/tags/wpad/ Recent content in WPAD on Insinuator.net - Bold Statements Hugo en-us Tue, 24 May 2016 00:00:00 +0000 https://insinuator.net/2016/05/wpad-name-collision-vulnerability-ta16-144a/ Tue, 24 May 2016 00:00:00 +0000 https://insinuator.net/2016/05/wpad-name-collision-vulnerability-ta16-144a/ <p>Yesterday the US-CERT released a <a href="https://www.us-cert.gov/ncas/alerts/TA16-144A">Technical Alert</a> (TA16-144A) about the recently found WPAD Name Collision Vulnerability. We will give you a summary about the vulnerability as well as the basic mechanisms here.</p> <h2 id="wpad">WPAD</h2> <p>The Web Proxy Auto-Discovery Protocol is used to auto-configure the proxy for web browsers. So when joining the according network the browser can use DHCP and DNS methods to find a specific configuration file (typically named wpad.dat), which is loaded and applied to the browser’s settings. Therefore, there is no need to configure each browser in your environment individually/manually.</p>