An application that is accessed over a network such as the Internet or an intranet using a browser.

learn more… | top users | synonyms

2
votes
1answer
49 views

Signing web forum messages

I maintain web forum software, which is accessible via NNTP and e-mail (as mailing lists). Since NNTP by design allows anyone to spoof their e-mail address, message signing can be used instead to ...
2
votes
1answer
151 views

Is an encrypted .dmg file decrypted on the dropbox server? [closed]

I'd like to use built in tools to create an encrypted drive in OS X that I can sync with Dropbox. To this end, I've created a 'sparse bundle' encrypted volume (.dmg) that remains in ~/Dropbox. My ...
4
votes
2answers
208 views

Is the following authentication solution safe or am I missing something?

Context: I have two web servers ServerA (LAMP stack) and ServerB (ASP.NET stack). I think the technology (hopefully) does not matter. Both servers require authentication and supposedly doing their ...
1
vote
1answer
65 views

How to avoid abuse of web-server endpoint from a rogue client?

I realized that once a user logs into the application and receives an Auth token there is the potential that they could use that token along with a rogue client to exploit an endpoint that they now ...
3
votes
1answer
40 views

Better alternative to WAF path whitelisting?

We are managing a WAF which is being used by some applications. Recently I tried to use a Valid URL module to white list all the APIs and static resources of an application. Although from the security ...
2
votes
3answers
102 views

Where to find about web application vulnerabilities' history? [closed]

There are many web application vulnerabilities out there, such as XSS, CSRF, and etc, and there are many resources which explain them very well. But I want to find about their history, for example, ...
3
votes
2answers
137 views

How can I execute a XSS when a web application transforms a data from lowercase to uppercase?

I'm testing a web application, when I send an input data to web application, this places the data in an onlcick function, something like this: <a href="#" onclick="someFunction('dataFromServer', ...
0
votes
1answer
54 views

Verifying that a request is internal

I've got a web app that will only output safe code. It needs to pass this to a Python backend. The logical way to pass things between JavaScript and Python is to have a Flask server running. Then, the ...
77
votes
6answers
9k views

How to find out what programming language a website is built in?

I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in. I know that URL extensions, HTTP headers, ...
3
votes
1answer
52 views

Informative error messages in password reset functionality?

When I am implementing password reset functionality I usually do not include informative messages about whether a user was found, because I have always believed that it can lead to user name ...
3
votes
2answers
49 views

How to host application monitoring and administration dashboards?

I'm in the middle of completing a web app for production. This is my first one. I'm at the point where I have to put together an administrator dashboard for comprehensive monitoring and administration ...
1
vote
1answer
75 views

How specifically should I implement CSRF protection?

There are a ton of articles explaining what CSRF is and that I should use a CSRF token to prevent CSRF. A few of them mention details such as using SHA256 over MD5. However, none of them explain how ...
3
votes
2answers
115 views

How can i demonstrate remote file inclusion via get methods

I have been testing my PHP web application for RFI vulnerabilities. While performing scan I was able perform RFI in my web application. Scenario: In my web application RFI works only when the user's ...
2
votes
1answer
121 views

What can I do about a malicious site with a similar domain name?

I recently purchased a domain name (lets pretend it was generic.co), I checked to see what site was hosted on the domain close to mine (generic.com). The site loads a fake blue screen of death and ...
8
votes
2answers
710 views

Using optical illusions as CAPTCHA

Would using the "flaws" in human perception of an optical illusion graphic allow a system to differentiate between humans and machines (using these pictures like a CAPTCHA)? Some examples are where a ...
4
votes
4answers
161 views

Why there are so many web servers which get exploited by generating obfuscated files?

TL & DR How do those obfuscated files many users complain on this SE-site about get on their systems? And after that, even more interesting how they get executed? Is this caused by the way php ...
6
votes
3answers
107 views

Is there any concern regarding a database primary key exposure? [duplicate]

Is there any risk if for example I let to end users to know the primary key associated to users in the database?
4
votes
1answer
79 views

Is running IIS application pools as a domain user considered bad practice?

I'd say the question is self-explanatory, but to give a bit of context to the sort of environment I'm talking about. The scenario is that your webservers are being joined to the domain to make ...
1
vote
0answers
57 views

Force Browser to not URL encode specific chars [duplicate]

I try to get a XSS to work but the problem is, that the XSS is only working within BURP because there I can send for example '>' as an not URL encoded String. As soon as I try it in the browser, it is ...
0
votes
2answers
65 views

Do you need to know the filename to conduct a Directory traversal

If my websites has a directory traversal vulnerability (linux) and my other php pages have complicated filenames (e.g. efj93ehdsijgdij3g.php), could an attacker still access other files? Or an ...
-1
votes
1answer
73 views

Why does a CDN server need my IP address to let me download a video? [closed]

I used browser developer tools to get the source page of a video from a webpage. When I try to open the full URL containing the video, I see my public ip address is contained in that URL. Changing ...
0
votes
2answers
145 views

Why can't I test XSS Vulnerability?

I am using DVWA and having trouble executing a simple, reflected XSS vulnerability. Entering the suggested text does not produce a popup in either Firefox or Chrome. Are there any settings that I need ...
5
votes
5answers
149 views

Should I use CSRF protection for GET requests?

I've seen several blanket statements on the web to the effect that you don't need CSRF protection for GET requests. But many web applications have GET requests that return sensitive data, right? Then ...
3
votes
1answer
106 views

Caging unsecure internet facing IOT device

Suppose I bought a domotic IOT device which connects to the internet via an ADSL modem and permits access to it via web browser or smartphone app without SSL encryption and several other weaknesses. ...
12
votes
5answers
2k views

Unknown process on my ubuntu machine communicating over multiple ports with UDP proto

I have a Django web application where the web app and the postgresql database are hosted on two separate Ubuntu-based machines. On my Database machine (and not my web application), if I run sudo ...
26
votes
7answers
3k views

Is it possible to modify your user agent http header for malicious use?

The Google crawl bot uses the user agent "Googlebot", and I am wondering if this knowledge can be used maliciously. Let's say in a random website, the Googlebot user agent is allowed to access an ...
1
vote
2answers
83 views

How to prevent reflected XSS with the Java Struts Framework? [closed]

I have an application that executes under Jboss server. I have an Apache server in front. My application contains a security vulnerability (XSS Cross-site scripting). I wanted to know that I had to ...
3
votes
2answers
37 views

Are there any risks associated with importing metadata?

My organization uses a plugin to import metadata associated with images on web pages. Are there any risks associated with importing metadata?
41
votes
5answers
5k views

What's the danger of having some random, out of my control, JavaScript code running on my pages?

My website pages reference some JavaScript code from a third-party CDN (analytics, etc). So I don't control what code is there - the third party may change those scripts at any moment and introduce ...
1
vote
1answer
88 views

Is logging a user out with CSRF a security issue? [duplicate]

I found the following behavior on a relatively popular website: They have a GET route for logging out (e.g. /api/user/logout). That allows me to write ![](/api/user/logout) in a comment or anything ...
5
votes
1answer
465 views

Storing a password securely as part of a webservice

Say I'm creating a public web service which needs to write files to a Dropbox account (just an example). It needs to write files to one central account, not one per user. This service needs to access ...
3
votes
1answer
103 views

JS snippets on my live project do not appear in my code residing on my production server

I have a Django website project that is live (let's call it example.com). It's a forum where users can submit comments and reply to them. It has a Postgresql database, and gunicorn + nginx reverse ...
-1
votes
1answer
36 views

SSL cert and region performance [closed]

I was asked to find the best available SSL cert for deploying a global solution in which performance is critical. But... does it really matter who is going to be the CA? AFAIK (never set up SSL ...
0
votes
0answers
38 views

Encoding payloads for GWT version 7

I'm auditing a website built with Google Web Toolkit. It uses serialization version 7, so the tools from GDS Security won't work (they only work till version 5). Using this technique I got all ...
-5
votes
1answer
66 views

Mobile number tracking

Is there any way we can track our mobile when it is lost? I have done a google search on the same and found that we have websites which give us the details of where the SIM was purchased & ...
0
votes
0answers
28 views

Are There Any Measurements for Web-Application Complexity That Positively Correlates to Num. Vulnerabilities?

Web-applications have vulnerabilities. Generally, a more complex web-application has more vulnerabilities, compared with a simpler and smaller web-application. For example, white hat hackers have ...
6
votes
2answers
138 views

Malicious user inflicting XSS attacks appears to be on my own network

I have a live Django project where I'm using nginx as a reverse proxy with gunicorn as the application server. It's a fairly new project and isn't SSL enabled yet. There's a user on this project who's ...
1
vote
1answer
89 views

Benefits of injecting antivirus inside browser

Some antiviruses propose you to use their browser plug-ins. For instance, Avast SafeZone propose you reactive defend by checking signatures of keylogers/malware/spyware etc. But, what's the benefit ...
-2
votes
2answers
142 views

How to securely transfer password from a registration page to the database [duplicate]

What steps must be followed to send password securely from the user registration page (i.e. client side) to the server over a non encrypted channel (http) when the user registers for the first time ...
1
vote
4answers
245 views

Fraud detection to avoid fake users

I know there is no 100% solution for fraud detection, but at least I want to set some level of confidence in this use case. Suppose that I have a system where: A user need to make a registration A ...
1
vote
2answers
162 views

SafeZone: keyloggers/malware/spyware protection

As part of Avast free updates you have a chance to use SafeZone browser. Among features of SafeZone browser I found that SafeZone protects you from keyloggers/malware/spyware. I'm interesting ...
3
votes
3answers
279 views

Is web application connected to a database via an application server is more secure?

I have heard from my colleagues and some other people on web suggest that it is more secure to run this configuration: Web server -> Application server -> Database, than this: Web server -> ...
5
votes
4answers
166 views

Is information disclosure in a form of a server header is a real vulnerability?

I have seen in many places that people say that headers of the following types is a vulnerability: Server:Microsoft-IIS/7.5 X-AspNet-Version:4.0.30319 X-Powered-By:ASP.NET I can see that this gives ...
2
votes
0answers
55 views

Methods for allowing restricted access to web applications

Since I'm fully aware that allowing access for anybody to open web hosting control panel (login page), can be a little bit risky, I started to think about restricting access and allowing only for my ...
3
votes
1answer
97 views

Why attack detection based on the same user request from different places (e.g. by IP) is not widely used?

There are many ways how an adversary can pretend that he is a legitimate user (like session cookie stealing, bruteforcing the password and what not), but as far as I can see it should be rather hard ...
3
votes
1answer
68 views

Is same origin policy for web only useful because of cookies?

There is a same origin policy in the browser to ensure that e.g. bad site won't read your data from Facebook. But it seems that the only problem that it tries to solve is that cookies are ...
2
votes
2answers
83 views

Should it be possible in a good software, using a “Change Password” link for a single user, to try to guess passwords for every user of a Application?

I am having a fight with the "Security Expert" of my team about this very basic question and I need help in getting a good valid argument(s). The pretext is as follows: Should it be possible/valid to ...
3
votes
1answer
127 views

web application extracts uploaded tar files, is it vulnerable?

I have a python based web application running on a linux server, Is the following flow vulnerable? HTTP file upload (regular post from browser) server validates max size before processes the file ...
3
votes
1answer
24 views

Automatic client executable updating

Scenario I am currently developing an application which should automatically update (if applicable) every time it is executed. The update would involve replacing the main.exe and any assets in an ...
3
votes
1answer
119 views

What is pseudo-encryption key vulnerability?

An organization in a related business was recently hacked. The hackers downloaded several GB worth of files with private information and posted it on the Internet. The news article states: “They ...