An application that is accessed over a network such as the Internet or an intranet using a browser.

learn more… | top users | synonyms

0
votes
0answers
4 views

Knowledge base solution access

Presently working on a knowledge-based solution platform which I want to be accessed both online /offline via data and sms by searching keywords.... Please I need help with regards to the offline(sms) ...
8
votes
4answers
1k views

Would a (password + combination of images) be stronger for user's login regarding keyloggers?

The scenario: We have a login system for a web application that requires a plaintext password and 3 images (from a collection of images that the users select during registration, the images are ...
-3
votes
4answers
123 views

Which cryptographic algorithm should be used on client side to encrypt file before uploading to a cloud which is only for storing purpose?

I want to develop a website which will take the files from my computer encrypt it with my key and upload it on cloud which is only for storage purpose and decrypt it after downloading it on my ...
1
vote
1answer
90 views

Using user agent & inputs for SQL injection with ModSecurity WAF

I'm trying to test a challenge website using ModSecurity as a WAF. When I put ' in the user agent I got an error from MySQL. You have an error in your SQL syntax; check the manual that corresponds ...
11
votes
1answer
2k views

Properly masking credit cards

I'm wondering if the following masking of credit card would be considered PCI compliant. ######??????#### # Is plaintext ? is redacted Expiration date is available in plaintext Is it ...
1
vote
1answer
67 views

What is the best way to upload a file securely? [closed]

What is the best way to upload a file securely? My client is a .NET Desktop Application and server is Apache Tomcat running JSP Files, running on a Linux OS.
0
votes
1answer
68 views

XSS payload without using < and >

I am performing testing on a site that takes input from the user and places it between <span> and </span>. However, < and > from the user are encoded as &lt and &gt. Is ...
-1
votes
2answers
41 views

Block requests containing URL of other websites

GET / HTTP/1.1" 200 166113 "-" "Mozilla/5.0 (compatible; dsada/2.0; +http://www.asd.com/search/asddd.html) I found this request repeated continuously in my logs. How can I prevent this (requests ...
2
votes
1answer
54 views

Cross domain iframe security

How exploitable is a site listening to browser messages from anyone? I am working on a site where I have found some iframe issues. The case is that site A has an iframe of site B, and site A listens ...
0
votes
2answers
65 views

Security of picking unique passwords for users [duplicate]

I am learning more about security in web design so I can build more robust sites. As I see it password security is one of the main concerns, if a database is hacked then chances are passwords will be ...
0
votes
1answer
37 views

Does the use of mod_rewrite make PHP array injection (web parameter key tampering) impossible?

Does the use of mod_rewrite make PHP array injection (web parameter key tampering) impossible? Let's say we have the following URL https://example.com/product.php?id=1&action=show Now example....
1
vote
4answers
79 views

How to use XSS vulnerability to read file on server?

Can I use an XSS vulnerability to read files on the server by injecting PHP code to the page? Ex: Use document.write to inject PHP code that read the file.
2
votes
0answers
52 views

How can I protect my PHP app against XSS?

I am upgrading the security of an existing site (so can't redo everything with a framework that has xss functions built in), so I am looking for a way to protect against XSS attacks such as the ones ...
5
votes
3answers
97 views

Why OWASP Top 10 (web application) hasn't changed since 2013 but Mobile Top 10 is as recent as 2016?

Latest edition of OWASP Top 10 for web application was in 2013 and for mobile applications, it is 2016. Why is it so? Can we say that the pattern in the web application vulnerabilities is settled? ...
0
votes
3answers
189 views

Suspicious base64 code, no one knows from where. Is it harmless? [closed]

While doing some testing on my site I found this code at the bottom of several of our pages. It appears to be encoding for a scaleable vector file of Pinterest's logo, that's all fine and good, but I ...
2
votes
1answer
41 views

How to check whether NTLM v2 or v1 is used for authentication?

Which tool should I use to check which NTLM authentication is used? Consider the fact that I am a user of the web application and not the owner. Are there any security concerns if a site uses NTLM ...
0
votes
1answer
31 views

How to GET security answer values via AJAX for user edit

I have an issue where our app had an app scan issue. The application is using GET to retrieve info for a user profile page (written in HTML/Javascript). This page has the user's security questions ...
0
votes
2answers
119 views

Remote code execution vulnerability in PHP's base64_decode?

I'm trying to pentest a PHP script. This is the last line of the script that I want to exploit: Header("Location: ".TOP_DIR."/".base64_decode($_GET['ref'])."&imgid=".$_GET['imgid']); Is it ...
-2
votes
2answers
51 views

Two factor authentication + saved logins are safe?

I have two factor authentication. I understand that by using a keylogger an attacker can bypass that authentication. However I think that if I check regularly on saved logins or past logins I will ...
1
vote
1answer
42 views

RCE in a PHP script that doesn't have write permissions

So i've found a RCE vulnerability in a PHP script (it's in a file called viewfile.php). Basically, from this file I can execute whatever PHP code I want, for example, <?php echo phpinfo(); ?> ...
0
votes
1answer
82 views

SQL queries using SQL Injections do not work as I think they should

I am trying to learn about SQL Injections. I have created a login form using PHP (I am quite new to PHP) as backend scripting language and MySQL as DBMS. Last day I asked a question about SQL ...
0
votes
0answers
21 views

Path Relative Style Sheet Injection: Switching on the quirks mode

This Portswigger article talks about PRSSI where an attacker can exploit relative URLs and trick browser to import HTML pages as stylesheets. My questions: Quirks mode must be enabled to exploit ...
9
votes
7answers
5k views

Why does XSS affect so many websites?

According to an article I read 65% of all websites globally suffer from XSS. Why can't developers find and fix it? Please help me understand. I'm not from a security or tech background.
1
vote
3answers
57 views

When is IP blocking OSI level 7 only and what is the purpose of doing so on multiple locations?

Let's say there is an application that has IP whitelisting, all other IP's are denied. This check takes place on three different locations: iptables, .htaccess, PHP script. Now in what OSI layers ...
0
votes
0answers
34 views

Securing a Web API Service Layer

We've created a website and am using a service layer to expose common functions so that other applications will be able to call via REST API. The main website will have users that will add/edit ...
2
votes
2answers
57 views

Why should I expire validator links after a while?

There are few kinds of links which validate something. For example when you create an account on a website, that website sends you an activating-link. You have to check your inbox and click on the ...
-1
votes
1answer
60 views

SQL injection prevention by replacing ' with '' [duplicate]

I'm working on a web application which is vulnerable to SQL injection in its search box. It uses ASP.Net (C#) and Microsoft SQL Server. In the search box it queries like: Select Column1 from TBL ...
-1
votes
1answer
72 views

How risky is it to disclose your IMEI number? [duplicate]

What will happen if I have mistakenly given my Android phone IMEI number to my IT colleague at my work place? How risky is it? I have asked him to delete my IMEI number. How can I be sure that he is ...
1
vote
1answer
31 views

Why would you maintain multiple session ID's in one application?

There is a web application and I am looking at the cookies values after authentication using Burp proxy. There are 5 different cookies, say c1, c2, c3, c4, c5. When I tampered with the values of ...
4
votes
2answers
52 views

Verification-less signup when user has been invited?

The typical signup procedure is of course: Alice enters email address and desired password (and possibly other data). A verification email is sent to the address Alice provided. Alice confirms her ...
1
vote
1answer
40 views

What security considerations should I keep in mind when setting up home automation using IFTTT?

My next personal project is going to be setting up some basic home automation for my parents (not very tech savvy but have a potential to learn). This involves some thermostat, lighting and ...
4
votes
2answers
785 views

Why can't persistence XSS be detected by a Web Application Firewall?

This OWASP article mentioned that "Using data validation, only reflected XSS can be detected and prevented, persistent XSS cannot be detected, DOM-based XSS only to be limited degree if part of the ...
1
vote
4answers
97 views

Is it a vulnerability if an application cookies carry sensitive information?

I am assessing a small e-commerce web application. I have found that the application passes the order details, the cost, the order ID etc as a part of the cookie. Tampering with it does not affect the ...
0
votes
1answer
47 views

Number of Column Enumeration in PHP / MySQL

I am currently studying SQLi from a book which I won't mention to avoid any copyright issues. The book contains many examples of strings / code from MSSQL, MySQL, Oracle etc. I am currently stumped ...
3
votes
1answer
40 views

Access control allow origin browser protection efficiency

I was building a website as an experiment, and tried using few ajax requests to different sites. On some sites I will get an error: XMLHttpRequest cannot load http://example.com/path No 'Access-...
3
votes
1answer
53 views

Is “Windows” mode inherently more secure than Forms authentication for .NET web apps?

We have a web application being reviewed and I see the usual section in Web.Config: <authentication mode="Windows"> <forms loginUrl="~/Account/Login" timeout="10800" defaultUrl="~/"/> &...
1
vote
1answer
65 views

Security disadvantages of sending a password with GET? [duplicate]

Other than over your shoulder peeping, if a password is sent using GET in plaintext over an encrypted connection, are there any extra security disadvantages or is it the same as POST?
1
vote
2answers
92 views

Risks in avoiding AdBlock detection by importing cookies or simulating the displaying of ads

I've increasingly been finding that many of the websites that I access have now been requesting whitelisting by my adblocker. Sites that do this like Forbes, NDTV, do not allow you to proceed until ...
3
votes
3answers
92 views

Single web application - security advantages to two server model?

I'm looking to deploy infrastructure for a web application that will live on a LAMP stack. The infrastructure is such that this is the only application that will ever live on this server and it must ...
1
vote
1answer
34 views

Should pypi subdirectories be accessible from web browser?

I am a security researcher and when I was fingerprinting one web application I found out that all the subdirectories of domain.com/pypi were accessible from the web browser. The main directory pypi ...
-1
votes
1answer
67 views

Do I need to detect user's device for “remember me” system? [closed]

I'm following solution #1 of this answer. After a while, there will be some redundant rows in the table. Suppose this table: // cookies +---------+-------------------------+------------------+--------...
1
vote
2answers
74 views

Remember me vs. persistent session for web applications

This question is intended to gather information about what the specific security advantages/disadvantages are to using a "remember me" function for an online web site relying on sessions compared with ...
0
votes
2answers
147 views

Why not have an identical session cookie for different user's devices?

Here is my table structure: // users +----+--------+------------------------+------------------+-------------------------------+ | id | name | email | cookie | /* some ...
3
votes
1answer
83 views

How dangerous is leaking knowledge about existence of objects which the user is not allowed to access?

It is my understanding that good security design does not reveal information about data which the user is not allowed to access. This includes information about the existence of said data, i.e. if a ...
49
votes
9answers
9k views

Is the UK Parliament e-petition system trustworthy?

Over the last few days, I've been hearing often about the petition to (pratically) "repeat" the Brexit referendum and I noticed that it is an online petition. I noticed that the "sign petition" form ...
-6
votes
0answers
48 views

How do I decrypt this unknown cipher text? [duplicate]

I got this unknow cipher text. Can you solve this? This looks like encoded PHP with base64/str_rot13/gzinflate eval. nI31RZG+Rxb1RZGzRMfsOdNql2K9RsesRLDVOdNqnLWtOdNqRtJtRtm1RZG8OdNrmxb1R/...
227
votes
16answers
50k views

SQL injection is 17 years old. Why is it still around?

I'm no techie and would like your expertise in understanding this. I recently read a detailed article on SQLi for a research paper. It strikes me as odd. Why do so many data breaches still happen ...
3
votes
2answers
85 views

How to secure communications between a web front-end and the web server when/where the HTTPS protocol is compromised?

A country in the Central Asia has issued a law enforcing all the ISPs to decrypt the transit HTTPS traffic and encrypt it with a special certificate issued by the government. Every client is to ...
1
vote
2answers
60 views

Implications of replacing Java Applets with Client Side Websocket Server

I am no security expert, but do know some concepts. We have a enterprise web application which currently uses Java Applets to do some operations on files in Client's File system (Browse, create, ...
7
votes
3answers
62 views

Implications of leaving admin UI accessible to non-admin users

I am developing a system to be used internally within a company, but possibly also externally at some point in the future. From the standpoint of the system's initial users - staff, the program is ...