An application that is accessed over a network such as the Internet or an intranet using a browser.

learn more… | top users | synonyms

0
votes
1answer
29 views

Remote File Include - commands running on attack box?

I think I am losing my marbles. I am doing a practice lab, and the machine has a server hosting a site with a RFI vulnerability. I host a malicious php file in my /var/www/html and start the apache2 ...
1
vote
1answer
44 views

What's the point in “authentifying an application” with its domain name against a db?

As a self-taught discovering professional development, I daily run into things that puzzles me. Simply put: I'm supposed to work on an old ZF1 application (with really ugly code, imbricated ternaries,...
-1
votes
0answers
73 views

How secure is Wire?

I have stumbled upon this replacement for Skype, which claims to take privacy seriously. They recently open-sourced their client-side code. Is Wire secure? What data can be intersected and read by a ...
0
votes
1answer
60 views

How to secure Web directories allowing only me to acess them

I have a web folder with some PHP files that are hosted in my website(e.g. www.mysite.com/myfiles/my_file.php) that I access and trade information using ajax for a Web App that I have. My question is,...
0
votes
1answer
20 views

Session id remain same after and before logging in asp.net application

Before logging in to the asp.net application, i checked the headers and there was already a session id in cookie header cookie: ASP.NET_SessionId=3de0es3brpfbcmvkzhkidsmt And when i logged in to the ...
0
votes
0answers
28 views

Client side encryption over SSL

I need to handle hyper secure data collected from webforms on a site. I was thinking of using whole site SSL encryption with client side encryption of the forms data. Due to a higher than usual risk ...
-1
votes
0answers
7 views

Knowledge base solution access [on hold]

Presently working on a knowledge-based solution platform which I want to be accessed both online /offline via data and sms by searching keywords.... Please I need help with regards to the offline(sms) ...
0
votes
0answers
24 views

Error based injection in Insert query

I'm trying to test a challenge website using ModSecurity as a WAF. When I put ' in the user agent I got an error from MySQL. You have an error in your SQL syntax; check the manual that corresponds to ...
11
votes
3answers
2k views

Would a (password + combination of images) be stronger for user's login regarding keyloggers?

The scenario: We have a login system for a web application that requires a plaintext password and 3 images (from a collection of images that the users select during registration, the images are ...
-3
votes
4answers
126 views

Which cryptographic algorithm should be used on client side to encrypt file before uploading to a cloud which is only for storing purpose?

I want to develop a website which will take the files from my computer encrypt it with my key and upload it on cloud which is only for storage purpose and decrypt it after downloading it on my ...
1
vote
1answer
101 views

Using user agent & inputs for SQL injection with ModSecurity WAF

I'm trying to test a challenge website using ModSecurity as a WAF. When I put ' in the user agent I got an error from MySQL. You have an error in your SQL syntax; check the manual that corresponds ...
11
votes
1answer
2k views

Properly masking credit cards

I'm wondering if the following masking of credit card would be considered PCI compliant. ######??????#### # Is plaintext ? is redacted Expiration date is available in plaintext Is it ...
1
vote
1answer
69 views

What is the best way to upload a file securely? [closed]

What is the best way to upload a file securely? My client is a .NET Desktop Application and server is Apache Tomcat running JSP Files, running on a Linux OS.
0
votes
1answer
70 views

XSS payload without using < and >

I am performing testing on a site that takes input from the user and places it between <span> and </span>. However, < and > from the user are encoded as &lt and &gt. Is ...
-1
votes
2answers
41 views

Block requests containing URL of other websites

GET / HTTP/1.1" 200 166113 "-" "Mozilla/5.0 (compatible; dsada/2.0; +http://www.asd.com/search/asddd.html) I found this request repeated continuously in my logs. How can I prevent this (requests ...
2
votes
1answer
58 views

Cross domain iframe security

How exploitable is a site listening to browser messages from anyone? I am working on a site where I have found some iframe issues. The case is that site A has an iframe of site B, and site A listens ...
0
votes
2answers
67 views

Security of picking unique passwords for users [duplicate]

I am learning more about security in web design so I can build more robust sites. As I see it password security is one of the main concerns, if a database is hacked then chances are passwords will be ...
0
votes
1answer
40 views

Does the use of mod_rewrite make PHP array injection (web parameter key tampering) impossible?

Does the use of mod_rewrite make PHP array injection (web parameter key tampering) impossible? Let's say we have the following URL https://example.com/product.php?id=1&action=show Now example....
1
vote
4answers
81 views

How to use XSS vulnerability to read file on server?

Can I use an XSS vulnerability to read files on the server by injecting PHP code to the page? Ex: Use document.write to inject PHP code that read the file.
2
votes
0answers
53 views

How can I protect my PHP app against XSS?

I am upgrading the security of an existing site (so can't redo everything with a framework that has xss functions built in), so I am looking for a way to protect against XSS attacks such as the ones ...
5
votes
3answers
100 views

Why OWASP Top 10 (web application) hasn't changed since 2013 but Mobile Top 10 is as recent as 2016?

Latest edition of OWASP Top 10 for web application was in 2013 and for mobile applications, it is 2016. Why is it so? Can we say that the pattern in the web application vulnerabilities is settled? ...
0
votes
3answers
191 views

Suspicious base64 code, no one knows from where. Is it harmless? [closed]

While doing some testing on my site I found this code at the bottom of several of our pages. It appears to be encoding for a scaleable vector file of Pinterest's logo, that's all fine and good, but I ...
2
votes
1answer
43 views

How to check whether NTLM v2 or v1 is used for authentication?

Which tool should I use to check which NTLM authentication is used? Consider the fact that I am a user of the web application and not the owner. Are there any security concerns if a site uses NTLM ...
0
votes
1answer
31 views

How to GET security answer values via AJAX for user edit

I have an issue where our app had an app scan issue. The application is using GET to retrieve info for a user profile page (written in HTML/Javascript). This page has the user's security questions ...
0
votes
2answers
124 views

Remote code execution vulnerability in PHP's base64_decode?

I'm trying to pentest a PHP script. This is the last line of the script that I want to exploit: Header("Location: ".TOP_DIR."/".base64_decode($_GET['ref'])."&imgid=".$_GET['imgid']); Is it ...
-2
votes
2answers
51 views

Two factor authentication + saved logins are safe?

I have two factor authentication. I understand that by using a keylogger an attacker can bypass that authentication. However I think that if I check regularly on saved logins or past logins I will ...
1
vote
1answer
42 views

RCE in a PHP script that doesn't have write permissions

So i've found a RCE vulnerability in a PHP script (it's in a file called viewfile.php). Basically, from this file I can execute whatever PHP code I want, for example, <?php echo phpinfo(); ?> ...
0
votes
1answer
83 views

SQL queries using SQL Injections do not work as I think they should

I am trying to learn about SQL Injections. I have created a login form using PHP (I am quite new to PHP) as backend scripting language and MySQL as DBMS. Last day I asked a question about SQL ...
0
votes
0answers
24 views

Path Relative Style Sheet Injection: Switching on the quirks mode

This Portswigger article talks about PRSSI where an attacker can exploit relative URLs and trick browser to import HTML pages as stylesheets. My questions: Quirks mode must be enabled to exploit ...
9
votes
7answers
5k views

Why does XSS affect so many websites?

According to an article I read 65% of all websites globally suffer from XSS. Why can't developers find and fix it? Please help me understand. I'm not from a security or tech background.
1
vote
3answers
58 views

When is IP blocking OSI level 7 only and what is the purpose of doing so on multiple locations?

Let's say there is an application that has IP whitelisting, all other IP's are denied. This check takes place on three different locations: iptables, .htaccess, PHP script. Now in what OSI layers ...
0
votes
0answers
37 views

Securing a Web API Service Layer

We've created a website and am using a service layer to expose common functions so that other applications will be able to call via REST API. The main website will have users that will add/edit ...
2
votes
2answers
57 views

Why should I expire validator links after a while?

There are few kinds of links which validate something. For example when you create an account on a website, that website sends you an activating-link. You have to check your inbox and click on the ...
-1
votes
1answer
60 views

SQL injection prevention by replacing ' with '' [duplicate]

I'm working on a web application which is vulnerable to SQL injection in its search box. It uses ASP.Net (C#) and Microsoft SQL Server. In the search box it queries like: Select Column1 from TBL ...
-1
votes
1answer
72 views

How risky is it to disclose your IMEI number? [duplicate]

What will happen if I have mistakenly given my Android phone IMEI number to my IT colleague at my work place? How risky is it? I have asked him to delete my IMEI number. How can I be sure that he is ...
1
vote
1answer
32 views

Why would you maintain multiple session ID's in one application?

There is a web application and I am looking at the cookies values after authentication using Burp proxy. There are 5 different cookies, say c1, c2, c3, c4, c5. When I tampered with the values of ...
4
votes
2answers
53 views

Verification-less signup when user has been invited?

The typical signup procedure is of course: Alice enters email address and desired password (and possibly other data). A verification email is sent to the address Alice provided. Alice confirms her ...
1
vote
1answer
44 views

What security considerations should I keep in mind when setting up home automation using IFTTT?

My next personal project is going to be setting up some basic home automation for my parents (not very tech savvy but have a potential to learn). This involves some thermostat, lighting and ...
4
votes
2answers
787 views

Why can't persistence XSS be detected by a Web Application Firewall?

This OWASP article mentioned that "Using data validation, only reflected XSS can be detected and prevented, persistent XSS cannot be detected, DOM-based XSS only to be limited degree if part of the ...
1
vote
4answers
97 views

Is it a vulnerability if an application cookies carry sensitive information?

I am assessing a small e-commerce web application. I have found that the application passes the order details, the cost, the order ID etc as a part of the cookie. Tampering with it does not affect the ...
0
votes
1answer
47 views

Number of Column Enumeration in PHP / MySQL

I am currently studying SQLi from a book which I won't mention to avoid any copyright issues. The book contains many examples of strings / code from MSSQL, MySQL, Oracle etc. I am currently stumped ...
3
votes
1answer
43 views

Access control allow origin browser protection efficiency

I was building a website as an experiment, and tried using few ajax requests to different sites. On some sites I will get an error: XMLHttpRequest cannot load http://example.com/path No 'Access-...
3
votes
1answer
53 views

Is “Windows” mode inherently more secure than Forms authentication for .NET web apps?

We have a web application being reviewed and I see the usual section in Web.Config: <authentication mode="Windows"> <forms loginUrl="~/Account/Login" timeout="10800" defaultUrl="~/"/> &...
1
vote
1answer
67 views

Security disadvantages of sending a password with GET? [duplicate]

Other than over your shoulder peeping, if a password is sent using GET in plaintext over an encrypted connection, are there any extra security disadvantages or is it the same as POST?
1
vote
2answers
95 views

Risks in avoiding AdBlock detection by importing cookies or simulating the displaying of ads

I've increasingly been finding that many of the websites that I access have now been requesting whitelisting by my adblocker. Sites that do this like Forbes, NDTV, do not allow you to proceed until ...
3
votes
3answers
93 views

Single web application - security advantages to two server model?

I'm looking to deploy infrastructure for a web application that will live on a LAMP stack. The infrastructure is such that this is the only application that will ever live on this server and it must ...
1
vote
1answer
34 views

Should pypi subdirectories be accessible from web browser?

I am a security researcher and when I was fingerprinting one web application I found out that all the subdirectories of domain.com/pypi were accessible from the web browser. The main directory pypi ...
-1
votes
1answer
67 views

Do I need to detect user's device for “remember me” system? [closed]

I'm following solution #1 of this answer. After a while, there will be some redundant rows in the table. Suppose this table: // cookies +---------+-------------------------+------------------+--------...
1
vote
2answers
78 views

Remember me vs. persistent session for web applications

This question is intended to gather information about what the specific security advantages/disadvantages are to using a "remember me" function for an online web site relying on sessions compared with ...
0
votes
2answers
150 views

Why not have an identical session cookie for different user's devices?

Here is my table structure: // users +----+--------+------------------------+------------------+-------------------------------+ | id | name | email | cookie | /* some ...