An application that is accessed over a network such as the Internet or an intranet using a browser.

learn more… | top users | synonyms

24
votes
11answers
18k views

Prevent my site from being copied

Is it possible to protect my site from HTTrack Website Copier or any similar program? Without setting a max number of HTTP request from users.
18
votes
3answers
7k views

Cross Site Scripting without special chars

I'm testing a web application and I found a XSS vulnerability. I can break a tag and inject some code to the application but nothing potentialy dangerous for the client. The application has a filter ...
13
votes
8answers
3k views

Facebook account keeps getting hacked, can't seem to figure out why or how?

One of my friends, she has a lot of friends on Facebook, and uses it for marketing. Her account keeps getting broken into. Her password gets reset and/or gets locked for changing resetting password ...
3
votes
1answer
83 views

How dangerous is leaking knowledge about existence of objects which the user is not allowed to access?

It is my understanding that good security design does not reveal information about data which the user is not allowed to access. This includes information about the existence of said data, i.e. if a ...
-6
votes
0answers
48 views

How do I decrypt this unknown cipher text? [duplicate]

I got this unknow cipher text. Can you solve this? This looks like encoded PHP with base64/str_rot13/gzinflate eval. nI31RZG+Rxb1RZGzRMfsOdNql2K9RsesRLDVOdNqnLWtOdNqRtJtRtm1RZG8OdNrmxb1R/...
3
votes
2answers
86 views

How to secure communications between a web front-end and the web server when/where the HTTPS protocol is compromised?

A country in the Central Asia has issued a law enforcing all the ISPs to decrypt the transit HTTPS traffic and encrypt it with a special certificate issued by the government. Every client is to ...
1
vote
3answers
141 views

How to prevent source code theft in web application development

I'm developing a webapplication working with PHP, SQL DB and other technologies. I'm always considering someone stealing the source code or using it to other means. How can you prevent someone from ...
2
votes
1answer
106 views

To protect against clickjacking, is it safe to have a web page display its content until framing is detected?

Let's assume we have a web page that can't use X-Frame-Options, and the Clickjacking protection has to be JavaScript based. On this page, all sensitive actions and the display of sensitive information ...
7
votes
3answers
62 views

Implications of leaving admin UI accessible to non-admin users

I am developing a system to be used internally within a company, but possibly also externally at some point in the future. From the standpoint of the system's initial users - staff, the program is ...
15
votes
1answer
184 views

Preventing a site from appearing in the 'Most Visited' or 'speed dial' section of a web browser

Are there any established ways of preventing a website from appearing as an icon on the 'Most Visited' / 'Speed dial' / start page of a web browser? One example of this is the tab that opens by ...
-5
votes
2answers
60 views

Find admin login of webpages

I'm not able to find admin login page while pentest. How to find admin login of webpages? http://example.com/admin, http://example.com/wp-admin returns 403 forbidden or 404 errors. What to do in ...
0
votes
0answers
136 views

Social game authentication exploit

We're running a popular social game and we have a security problem that is growing more and more popular these days. We have the following product requirements: There should be no registration to ...
7
votes
3answers
2k views

Where can I find exploit code?

I am doing VA/PT on a sample web application. I run the Nessus scanner and I found some high severity vulnerabilities that are related to HP System Management Homepage. The CVE-numbers are: CVE-2010-...
2
votes
3answers
321 views

Multi-factor auth: implementing a “don't ask again for this computer” function

Many sites that support multi-factor authentication provide a "do not ask me again for this computer" option. I'm hoping to gain some insight into how this feature could best be implemented. My ...
4
votes
2answers
1k views

Managing and deploying web app passwords

What are some best practices for managing and deploying web app passwords and private keys? E.g. the password to access a database or external services like the Facebook API. I'm referring generally ...
-1
votes
1answer
560 views

Can someone break my anti DOM-based XSS javascript function? [closed]

Can someone break my anti DOM-based XSS javascript function using window.location? function parseparameters() { var href = window.location.href; var id = href.indexOf('#'); ...
0
votes
1answer
58 views

Should all web applications implement a security feature that stores historical passwords? [duplicate]

In addition to Is it safe to store a password hash history for preventing user to keep same password repeatedly in some cases?. Facebook, and other companies, are storing historical passwords of ...
-1
votes
1answer
26 views

What would you look at doing for a application review? [closed]

what things would you ask if doing a 3rd party application review. Eg should we use this companies application and is it secure.
1
vote
1answer
55 views

Security in transferring sensitive data over web apps

I am working on an app that has to transfer sensitive data over HTTPS and I have an idea but I am wondering if it is overkill or good. One of the issues is I need the ability to "share data" between ...
18
votes
8answers
6k views

Is XSS a server-side or client-side vulnerability?

My colleagues claim that XSS is a vulnerability on the server side. I always thought that this is a client side vulnerability. Which one of us is correct, and why?
-4
votes
0answers
47 views

Why would a website have a maximum character limit on passwords? [duplicate]

I was just about to sign up for a website but the maximum password length was 10 but I can't think of a rational reason as to why a site would implement it that way. Can you guys think of anything?
5
votes
1answer
125 views

What should I store in the case that a user posts a threatening post?

I am building a social-media type website. I am going to have the users create a profile with their name, email and phone number. When a post is created I plan to have a spot in the database that ...
0
votes
0answers
47 views

How do anti cross-site request forgery tokens work?

Can anyone explain how CSRF tokens work in simple terms? Why should the CSRF-token be stored in a session cookie as well as in a hidden form field?
0
votes
1answer
47 views

Are there any risks in wrapping asymmetric encryption in symmetric?

The web app I am developing should be end-to-end-encrypted, but for slightly better user experience, I do not want the user to enter private keys into the client. Instead I am planning to store the ...
1
vote
1answer
63 views

Does a Web Application Firewall only protect OSI layer 7?

Does a Web Application Firewall (WAF) that is protecting application layer 7, as well protect other layers of the The Open Systems Interconnection (OSI) model?
6
votes
1answer
127 views

Is it safe to use the free Cloudflare SSL certificate since it's shared with other domains?

I have a free Cloudflare account where I manage my domain (ie: mydomain.com) and I use the free SSL certificate (mode Full SSL) in order to get SSL on a subdomain (blog.mydomain.com hosted with Github ...
1
vote
1answer
124 views

How can I control all my website's requests? [closed]

I need to manage my website's requests. Because of both I need to detect suspect requests and block that IP and calculate the number of users which visit my website. So I've created a table like this:...
24
votes
2answers
3k views

Is the undesirable conversion of a scientific number a vulnerability?

I noticed in several penetration tests that PHP is converting values like 1e9 to 1000000000 while the max accepted string length of this number is 3 (in the database storage and as maxlength property ...
4
votes
1answer
149 views

Are these encrypted URL values safe or could they be guessed?

One of our suppliers had a weakness on the secure section of his webpage. By changing ID's in the URL, we could see data that did not belong to us. For example: https://supplier.org/showItem.do?...
2
votes
2answers
938 views

Breaking out of attribute in double quotes

I have a piece of code that allows for [url]someurl[/url] BB-Code and replaces it with <a href="someurl">someurl</a> It takes two precautions to prevent XSS. It replaces <, &...
10
votes
3answers
11k views

Is it possible to inject HTML into image to provoke XSS?

Some answers mention that it's possible to inject attacker-controlled HTML into images and therefore provoke XSS. I guess that this HTML will be processed by browser only if hole exists in browser. ...
0
votes
1answer
90 views

Virus suspicion on website built with PHP Codeigniter [duplicate]

I have received a website, which uses Codeigniter, to modify. The problem is, sometimes when I refresh the main page, a strange file named "download" with the Windows icon will start to download. I'm ...
3
votes
1answer
56 views

PIN Entry via HTML rendered Keypad

I have a web application that replaces a non-web predecessor. A low level set of users accessed basic functionality with touch panels in the non-web previous version of the product with the touch ...
2
votes
2answers
70 views

How to categorise web vulnerabilities in a report?

What is a good way to categorise the vulnerabilities in IT security reports. Assuming it's about a web-based environments like: Websites, Web applications, Web shops, Any interface using web-...
2
votes
2answers
110 views

XSS payload with ten character length restriction

There is an input field which is not getting encoded at the server side. But if you give a whole script say <img src=a onerror=alert(1)>, it shows an error like: <img src=a....' is not a ...
4
votes
3answers
523 views

It is safe to buy a domain if I get this message in Firefox?

I want to buy a domain name from a big registar (well known on the internet) but when I go to checkout I see that my link is going from full encrypted to “Connection Partially Encrypted” and I am ...
10
votes
3answers
8k views

CSRF cookie vs session based tokens

I will generate a CSRF token and include it in a hidden form field. When receiving the request, I will check the form value against the value either stored in the user's session or in a cookie. Is it ...
2
votes
1answer
143 views

XSS not exploitable when POST data is sent in JSON?

There is a reflected XSS flaw in an application I am testing. Initially, the payload is sent in POST request as value of a JSON key and the response is also a JSON object. The returned value in the ...
0
votes
2answers
57 views

Can we consider injection of HTML tags without event attributes as XSS?

I'm wondering if we can consider the injection of HTML tags like a, image, img, video, audio, marquee or iframe without an event attribute as XSS? Since no JavaScript is involved and therefor no ...
152
votes
2answers
94k views

What is the difference between https://google.com and https://encrypted.google.com?

Is it there any difference between the encrypted Google search (at https://encrypted.google.com) and the ordinary HTTPS Google search (at https://google.com)? In terms of security what were the ...
0
votes
2answers
127 views

I want to encrypt certain entries in a database. Is this a good plan?

I'm working on a web app and want to offer the users the option to "encrypt" their account. This wouldn't encrypt everything related to them in the database. Just certain critical fields. I've ...
-4
votes
1answer
103 views

Is this script vulnerable to XSS? If yes, how can I exploit it? [closed]

Is this script is vulnerable to XSS? If yes then how can I exploit it? <script> //<![CDATA[ var _gaq=[['_setAccount','UA-34064858-1'],['_trackPageview']]; (function(d,t){var ...
-1
votes
1answer
22 views

How to securely pass data for backend update from client?

Suppose I have 3 videos on my page. Client can watch each of the videos, once complete, he would earn npoints depending on which video he has watched. I want to POST that n for the specific client to ...
0
votes
1answer
59 views

How come domain resolves to another IP?

I tried to ping http://crashsafari.com in my CMD: Right there, it resolves http://crashsafari.com to 54.231.48.170 which is http://s3-website-us-east-1.amazonaws.com. But, http://crashsafari.com ...
1
vote
1answer
90 views

How to protect the Session ID?

I have been doing some reading over the past few days on Session IDs and the methods taken to prevent people from intercepting them and using them to hijack a session. From what I have read, when ...
11
votes
2answers
243 views

Using certificates to secure

I'm working on an application that comprises of a C# WebAPI (on Azure Websites) and a native mobile app. Essentially, a client creates a series of messages using a Web interface and these can be ...
1
vote
1answer
72 views

How does XSRF-token per request work? (Angular solution)

I want to protect my application against XSRF. Although I couldn't really understand what the problem is and how my solution works, after some research I came up with a solution, which Angular uses. ...
3
votes
0answers
218 views

Is it safe to store bearer tokens in an iframe and/or pass them back to the parent window?

I am not a security expert, so I am hoping that a few of you might be able to tell me if there are any gaping flaws in the security design for my web app. Hopefully I'll be able to explain this ...
1
vote
2answers
99 views

Is it possible to make the back button work if we use one CSRF-token per request?

Do we need to compromise on back button navigation if we use one CSRF-token per request instead of one token per session? (I was successful in using one token per session without any navigation ...
0
votes
1answer
318 views

How to create a bot-engine [closed]

I requested a feature and the voting is currently in progress, which I believe has been hacked, and heavily down-voted. I believe the hacker might have taken the following steps to achieve this: ...