An application that is accessed over a network such as the Internet or an intranet using a browser.

learn more… | top users | synonyms

2
votes
1answer
141 views

Exploiting mailto links

Supposing that the user has the power to include any content after mailto: snippet, are there any possible security vulnerabilities? Example: The user says their email address is foo. The link on ...
0
votes
1answer
41 views

How to manage a custom session in a webapp?

I was reading through the OWASP Cheat Sheet and something mentioned in the "Weak Authentication and Session Management" row did not make sense to me. It is recommended in the Design Column, that ...
1
vote
2answers
93 views

two factor authentication without TLS/SSL

It seems silly to ask about using two-factor authentication without TLS/SSL but, I have a vendor that is using public IP without TLS and asking for login creds. Would the login be more secure if ...
1
vote
1answer
191 views

Security of IFTTT

IFTTT looks like a powerful service but I'm also highly sceptical of its security. Could somebody give me a brief rundown of how you think it works and what the security implications are please? I've ...
0
votes
0answers
31 views

Should I add signatures to the Netscaler Application Firewall for Exchange, Cognos, etc?

This link describes that I can use Cenzic, IBM AppScan, Qualsys, Trend Micro and Whitehat files to create an application filter for various products. I'm looking for filters that apply to commonly ...
3
votes
2answers
91 views

How do we verify identity before creating a new admin account?

We are designing the security for a B2B Saas service, the user and admin accounts are based on the customer's email addresses - typically our customers are small organisations without their own in ...
0
votes
1answer
247 views

Is this a website hacking attempt, and if so, what is it trying to achieve?

I've recently seen a few strange requests made on our site, I'm wondering what they might be. Normally we get sql injection attempts like this: ...
2
votes
1answer
123 views

Safety of exposing an internal web application to the internet using a reverse proxy in the DMZ

I am creating a web application which needs to make direct connections to internal resources (e.g. database servers), but will also need to be accessed from the internet. The web app exposes web ...
2
votes
2answers
93 views

Website being open inside 3d party domain/frame, is this a possible attack?

I recently had a huge increase in visits of a website I manage. On deeper check I discovered I had a new referral. When I opened the website I was quite surprised. It's not a just a referral, ...
5
votes
1answer
149 views

How do I securely embed an <img> tag using a user-given URL?

If I hypothetically wanted to allow users to use an avatar from an arbitrary URL like this: <img class="avatar" src="{user input}" /> There are many problems that I can think about: There ...
3
votes
2answers
140 views

web security testing - vulnerability issue

I'm testing a website to find out vulnerabilities. Website is fully running on HTTPS only. While testing, I came to know that the pdf files can be downloaded by authorized users only. This ...
0
votes
0answers
79 views

Social game authentication exploit

We're running a popular social game and we have a security problem that is growing more and more popular these days. We have the following product requirements: There should be no registration to ...
1
vote
1answer
399 views

How to exploit CRLF Injection?

I was running a few tests on a website when I came across this: Request: GET /accounts?intended_destination=internal_api%2Fcampaigns_dashboard%7Cshow&intended_params=format%3Dhtml HTTP/1.1 ...
0
votes
1answer
81 views

sqlmap cannot find a dispatched vulnerability

I have a known sqli vulnerability that I'd like to try out with sqlmap in a web application; however, I don't believe sqlmap is able to figure this one out. Here's how the system works: Inject on a ...
0
votes
3answers
105 views

Security benefits of hosting your CMS on localhost

If I host the CMS for my online website on localhost, will that mean that no one online can access it? If not, what is the most secure way to store your CMS?
2
votes
3answers
127 views

Is it safe to generate a password for a user during sign up in a web application?

I'm working on updating a web application. It currently creates a password for a user during sign up. Is asking the user to create the password themselves safer than relying on a generated password?
5
votes
1answer
212 views

Showing bank routing/account numbers, and storing them safely

EDIT: This is for the UK/Europe region. I've been scratching my head reading other posts similar to this one about safely storing bank routing and account numbers. I know that routing numbers can be ...
0
votes
3answers
300 views

Sending database name in request headers

I am doing a project with an architecture of single server and multiple database. Every client request will contain a header containing database name that this request should connect. Is this a good ...
1
vote
2answers
185 views

Storing encryption key in a cookie?

I have a website issue that I am addressing by storing an encryption key in a cookie. I want to describe my issue and my solution, and see if someone smarter about such things than I thinks this is a ...
2
votes
2answers
200 views

Website security checklist?

I'm building a web service (a control panel for clients) (PHP on linux apache) and trying from the design to make it the most secure as I can, Can anyone provide me with some kind of a check-list of ...
5
votes
3answers
152 views

Same Origin Policy - XHR response

I know that Same Origin Policy (SOP) prevents a page/script from one origin to read response from another origin, but it does not prevents the page/script from making a XMLHttpRequest (XHR) request to ...
13
votes
4answers
709 views

Custom socket server on the internet running as root

We are writing a custom socket server which runs on a high port. Until recently, it has been running behind a corporate firewall. Now, it has been decided that the server should be taken outside the ...
0
votes
1answer
74 views

HttpOnly at logout page [closed]

Firstly, my website can't be accessed without a session established. After a session is established then the server would set cookies. However, if i assess the website without a session, my site will ...
3
votes
3answers
123 views

Is CSP enough to prevent XSS attacks [duplicate]

Assuming that users are using modern browsers, is implementing a strict CSP policy enough to prevent all XSS attacks? I'm working on a Backbone app, and am wondering if I still need to be escape user ...
1
vote
1answer
43 views

Running webserver with SSL enabled but not used

We have a web server hosted by a third party running on port 80. They have also enabled SSL but we did not use it. We are just using port 80. Right now, when I do a vulnerability scan, some SSL ...
3
votes
4answers
154 views

Do search engines give searcher's IP address to sites that come up in search? [closed]

Ok so for example, I search "stackexchange" and a bunch of pages come up in the search result - of course most of them from this very site, and many other ones talking about stackexchange. Would this ...
2
votes
0answers
84 views

How to get directly to text versions of Google cached pages [closed]

http://navigators.com/cached.html According to the bottom of that site, it seems the easiest way to view websites without giving them your IP is: "Edit the heck out" of google URLs like this: ...
0
votes
4answers
89 views

Difference in Web Language Compilation and Execution

I'm trying to get a handle on the difference between certain web languages and the security implications of each. Specifically this is with regards to executing code in the context of the web browser ...
4
votes
1answer
105 views

Can source javascript files be infected from a developer's machine?

First a little bit of background, About two weeks back one of the developers in my team said they were seeing advertisement popups and links appearing all over the web app we were developing, when ...
4
votes
2answers
281 views

Pawn in a nefarious porn marketing campaign?

About a month ago we upgraded (maybe not the right term) our site to WordPress. In that time we went from about 3800 inbound links (according to Google WebMaster) to about 5000. We exported our list ...
1
vote
2answers
211 views

Dangers of robots.txt?

During a recent scan of my website, a robots.txt file was found and in it contains Disallow: /subsite1/ Disallow: /subsite2/ In order not to show any paths in robots.txt, as I am afraid that ...
4
votes
1answer
123 views

What are some useful tags and payloads for HTML injection on CSP-protected sites?

I'm pen-testing a website that fixed most of its XSS vulnerabilities by just adding a Content Security Policy. There are still HTML injections in several places. I've tried to get a ...
-1
votes
1answer
65 views

Is VBScript an actual tool to attack users?

While I was reading a ASP.NET book I found that is supports VBScript but this made me think if VBScript is still a tool of hackers to attack other users, I guess only Internet Explorer users, As I ...
1
vote
0answers
54 views

Logging in from one CMS to another

Two websites with different CMS, user should type login & password on one website and needs to be logged in second website automatically. Now i have this method, it works but i want to know - is ...
0
votes
3answers
189 views

What is the most secure way to save user authentication: Cookies or Session Variable?

I'm developing a web application that is basically for all our employees. Right now we have 3500 employees and all of them will access this web application. All of them will use really confidential ...
2
votes
1answer
72 views

Use the server's key to digitally sign the HTML content it delivered?

Is there any way to prove that a HTML page was delivered to my browser, and not modified in any way, after it was delivered over TLS? I need to prove integrity, and authenticity of the sender, ...
1
vote
2answers
148 views

Which unicode (control) characters should a web app (not) accept?

THIS IS NOT ABOUT XSS Threat: Mallory enters control characters in a public web application text field that other users might use in a terminal program (via copy+paste or by running a script). ...
3
votes
2answers
166 views

How secure is MD5 for TLS message authentiaction?

I was recently viewing a website and saw its certificate info as follows: Given that MD5 is badly broken and not recommended for hashing, how good is it for use in TLS? And why?
0
votes
1answer
327 views

How to bypass XMLHttpRequest header protection for a CSRF attack

A client is only submitting forms using XMLHttpRequest with the use of a header (X-Header: [any value would be correct]) to protect against Cross Site Request Forgery attacks. I know this is not the ...
12
votes
3answers
3k views

Is it dangerous to show all the JavaScript functions in my web application? [duplicate]

Right now I'm developing a web application and it uses a lot of JavaScript functions so I'm putting all of them in different JS files to access from the HTML, but the functions are "easy readable" so ...
1
vote
2answers
179 views

How to keep database record secret even from developer having access to it?

Imagine a web-based email app, such as GMail. The email should only be readable by the sender and the recipients. No one else, including the developer having access to the database server or ...
3
votes
1answer
287 views

Is my server being used as a proxy or being attacked?

I have an Ubuntu, Apache, Passenger, and Rails 4 project on AWS EC2. I am a beginner full stack developer and am unfamiliar with the security and server side of my project. Recently, my site was ...
2
votes
1answer
51 views

Secure the config file of a service

I have a service running on a linux box, started with upstart, that runs as user "the_user", it has to read a config file. Having the file owned by root would make things more secure, but would ...
1
vote
1answer
99 views

How can I tell if a user is access website with a forged IP?

there is a username (USERX). It's a suspended user. It it appearing in my user login files. It always appears in the middle of someone elses attempt (USERA) to reset their password, and WITH USERA's ...
2
votes
5answers
433 views

Software Testing vs (Web) Penetration Testing

I would like to ask about the differences between Software Testing and Web Application Penetration Testing. I am aware of usage different tools in both disciplines Software Testing (JIRA/Selenium) ...
0
votes
2answers
648 views

How to exploit Open Redirect Vulnerability?

Redirect/Forward attack code: <?php $redirectUrl = $_GET['url']; header("Location: $redirectUrl"); ?> exploit (Sends user from your page to evil page) : example.com/?url=example.com/faq.php ...
2
votes
1answer
84 views

Suspicious GET request parameter list? [closed]

Is there a public list of common suspicious GET request parameter ? I mean - SQLi, Command Injection, Admin access etc. I am interested in such list, to be used to detect suspicious GET request in ...
3
votes
2answers
94 views

JKS - Keystore protection and configuration file

It appears that Java Keystore is often used by web server using a configuration file, with the password opening the JKS written in it and also the password protecting the specific entry. How could ...
1
vote
1answer
140 views

“It is safe if only Port 443/HTTPS is accessible from Internet!” Is it? [closed]

I was in discussion with a vendor to implement a backup solution and as flexible as most cloud applications nowadays, it needs to be access from anywhere on Internet without VPN or any special ...
0
votes
1answer
165 views

Java desktop app vs web service [closed]

I currently have a desktop app written in Java (Swing) which talks to a C-based backend over SSL. I am trying to understand the pros/con from a security perspective to move to a web service model. ...