An application that is accessed over a network such as the Internet or an intranet using a browser.

learn more… | top users | synonyms

19
votes
1answer
2k views

The “.htaccess” file can be downloaded. Why? How to fix?

Maybe a noob question. I've tried searching but maybe my search terms were too specific. I've just conducted a pen test on a client's site. The site allowed me to download .htaccess just by simply ...
-3
votes
1answer
68 views

Can anyone recognise this type of encoding? [closed]

I'm doing some testing and I need help understanding this type of encoding, Any ideas? Can anyone recognise it? b90de9b1-eab7-c579-ef74-08d2be5bc0ba Thanks.
4
votes
1answer
391 views

How to authenticate in a website with public/private keys?

I've been reading how the SSH public/private key works and realized how handy they are (taking the secure out of the equation). And started to wonder why websites do not implement the same thing? ...
1
vote
1answer
223 views

SQLMAP : Unable to dump any data

I am working on a black box web application pentesting project for a client and while testing found an error-based SQL injection. I went on to exploit it using SQLMAP, I retrieved the Database names, ...
2
votes
1answer
126 views

Access documents on internal network with website securely

I have a large document store of client data on my internal network. I am in the process of engaging some developers to build a website to make this data available to my clients externally. I also ...
3
votes
2answers
94 views

Custom http server security concerns

I am using a framework called VERTX to create an HTTP server. This is different from a traditional web server such as APACHE or NGINX. Here I will simply be using JAVA code to create a HTTP server ...
2
votes
2answers
265 views

How to intercepting iOS HTTPS traffic

How can I intercept & parse through the SSL traffic (incoming & outgoing) generated by my iPad application?
7
votes
1answer
196 views

How do I prevent users from modifying resources they do not own?

I am writing a server where I have an entity StoreOwner that "owns" or has a @OneToMany relationship to a Store entity (one store owner has 1 to N stores). Each Store has Offer and Item, each also ...
2
votes
2answers
227 views

MD5 brute force on a faulty hash?

MD5 for passwords is considered insecure due to the ability to brute force and pick up the result. But what if I change some characters of an MD5 hash and I keep a record of that change so that ...
18
votes
4answers
4k views

Is there a way to download a PHP file without it being executed?

I recently got a phishing mail of unusually bad quality; "Please imediatly sign in under the following link, as we are your bank, you know"-ish. The link points to an unconvincing URL with .php at the ...
0
votes
2answers
191 views

What are the vulnerablities for revealing IP addresses in code

One of my developers left the IP inside his code : The code is as follows : [WebMethod] public string UploadFile(byte[] f, string fileName) { try { MemoryStream ms = new ...
2
votes
2answers
156 views

Assuring Client is Authorized to use JSON Web Token

JSON Web Tokens ( JWT ) are server-signed objects that the issuing server uses to identify a user, track session data and authorize requests. The fact that JWT are server-signed gives assurance that ...
0
votes
1answer
146 views

How to secure a websocket connection with challenge-response?

TL;DR Given that all of the state information for a web browser is accessible to a (potentially hostile) user, how can challenge-response authentication between the browser and the server be ...
-3
votes
2answers
65 views

Data to be Logged in a Web Application [closed]

What data should be logged in a web application? From all the perspective such as security, user access, data modification, path traveled by a user in application and anything that matters.
2
votes
2answers
132 views

Is encryption application credentials using certificate encryption good practice?

I'm working on a small web application. The web application needs access to a database, so the application needs access to a database username and password. The application runs in an environment ...
0
votes
1answer
68 views

How can you draw attention to your web application honeypot? [duplicate]

Unsatisfied with existing software, I'm currently toying around with writing a web application honeypot. My question is: how do you draw the attention of attackers and automated attacking software to ...
2
votes
2answers
192 views

Is always using HTTPS a good idea? [duplicate]

OK, this question might seem a no-brainer for a professional but keep in mind I am not a professional web developer so my knowledge in this field is very limited. I have been pondering over time ...
0
votes
1answer
100 views

Discovered a security flaw in a company, what to do? [duplicate]

While playing with a site I have discovered a huge security problem. The thing is, if I tell them about it they might question what was I doing in the first place. I was trying to hack my friends ...
3
votes
1answer
196 views

Getting a certificate warning for one email but not another

When I log into outlook.com using Chrome browser, I get a certificate warning for one account but not another. One says my connection is private, the other says it "may not be private". Here are the ...
1
vote
3answers
166 views

Multiple types of tracking

In a system where I have reviews of products, to avoid fake reviews I have thought about doing the following: Limit one review for each account -> To bypass this measure, the user could create ...
0
votes
0answers
26 views

Struts standard administrative actions unprotected - so what?

In an Apache Struts deployment, the struts-config.xml has the following stanzas: <!-- The standard administrative actions available with Struts --> <!-- These would be either omitted or ...
0
votes
1answer
244 views

Why enter again (or at the very least confirm) my email address when I click “Forgot password”?

In most, if not all, web forms for logging into a site, you have your forgot password link. When clicking the link, you get a new form (usually in a new page) either empty (!) or prefilled with the ...
2
votes
3answers
292 views

Is there a way to steal PHP or ASP code from a web server through the HTTP(S) protocols?

I am working on a web application that would include some custom development and got a bit concerned about code theft. So the question I wanted to ask is whether it is - generally speaking - possible ...
4
votes
2answers
557 views

Crossdomain.xml vulnerabilities

<cross-domain-policy> <allow-access-from domain="*" secure="false"/> <site-control permitted-cross-domain-policies="master-only"/> </cross-domain-policy> I would like to ...
-3
votes
2answers
64 views

Which HTTP requests support custom data in URL? [closed]

I am aware that HTTP GET requests are sent to web-server using query-string name/value pair in URL. This means that one is able to pass custom data to web-server. For example ...
3
votes
2answers
253 views

Encrypt part of users' data in web application vs. password recovery

I'm developing a web-application that stores sensitive user data. Although the data is sensitive we want it stored permanently because the users might want to come back later and reuse it. The user ...
2
votes
0answers
37 views

How to safely decrypt user data in scheduled script

I have a web application with a lot of stored db data, some of which is encrypted. The data is encrypted with a surrogate key, which itself is encrypted with a hash of a user password. Upon request ...
5
votes
4answers
769 views

XSS for stealing cookies … not anymore?

The other day I found a XSS vulnerability in a website that a friend told me to Pentest. It was a page from a school that he's managing, so the important thing here is the login credentials == ...
4
votes
3answers
126 views

Securely saving credentials for later plain-text authentication

I am developing a Django application where a user logs in with Kerberos, and then has accesses to a number of internal applications. One of these is a file application that connects to a server over ...
0
votes
1answer
103 views

What to do when one's server is being scanned very agressively

I can see that my application, which is on several virtual instances, is being scanned; I guess the attackers are in "recon mode." What I know: I understand that we can block dirbuster, and other ...
43
votes
2answers
7k views

Is this an attempted SQL injection?

Looking through error logs I found lots of requests to a web-app where the URL contains: ...
2
votes
1answer
157 views

Encrypting data before sending to SaaS tool and decrypting on browser view

I'd like to send data to a SaaS tool, where the data is stored in the cloud. I'll use Google Analytics as an example, but it applies to any similar service. Google Analytics does not allow you to ...
9
votes
2answers
589 views

Is allowing unfiltered curl request from a website a vulnerability?

Recently I was on a website which provided some non-sense feature: Enter a URL Press enter HTML source of a given URL is displayed It basically fetched a URL and just dumped the contents of it. ...
2
votes
2answers
110 views

Checksum Calculation for Source Code tar balls downloads

Http sites like OpenSSL provide checksum for each source code tarball available for download HTTPS sites like GitHub usually do not provide checksum with 'download zip' option. Some sites although ...
3
votes
2answers
144 views

What measures must be taken to securely authenticate from web traffic to a WebSocket connection?

Obviously TLS is a must for any and all secure authentication. Please turn your paranoia settings up to 11 for this. Background: (In case people are unfamiliar with the WebSocket (WS) protocol and ...
0
votes
2answers
120 views

Persistent XSS in Blogger domain

I have discovered persistent XSS in blogger domain. I have reported vulnerability to Google Security Team and I received this is the response: Users are permitted to place arbitrary JavaScript, ...
-3
votes
3answers
81 views

What security problems are there with enabling directory listing on my webserver? [duplicate]

I want to to ensure that every file on my webserver is secured. The problems I am having right now: If you go to my website, and enter a url like mywebsite.com/img/ if there is no index page in ...
1
vote
2answers
677 views

Centralized local hosted web based password manager

In our company we have more than 100 employers and everyone use several online applications daily. To access all of this sites they need a password which was now stored very insecurely. so I'm ...
1
vote
1answer
155 views

What security practices should I keep in mind during development? [closed]

I am beginning to develop apps for Android and iOS that make API calls to a PHP web application that I will be developing. Users will be required to sign up with a username, password, and (optional) ...
2
votes
1answer
316 views

Google Analytics use of JSONP, what are the security risks?

These days Google Analytics uses a JSONP request to load ga.js into user's web pages via a callback function. According to the Wikipedia, JSONP can "inject any content into a website." What exactly ...
2
votes
1answer
274 views

Using RSA for Web Application Authentication

I have a network that is only accessible through bastion servers over ssh. In it, I am developing web applications that are exposed to end users via GUI's served up over websockets. All traffic into ...
2
votes
1answer
96 views

How to Develop Waf as Service [closed]

Recently, I've started a my educational project WAF as service. To develop this project as per my view, following things are required: Web Application Firewall is in-line with the web servers; it ...
1
vote
1answer
55 views

How to migrate users? (Changing the login system)

Let's say that you are about to change your log in system and you have a few millions of users that you want to switch to the new system. Specification Old System Username : email address Password ...
0
votes
3answers
459 views

What are the different payloads used for XSS vulnerability? [closed]

I am new to information security field. I am searching for XSS vulnerabilities. In XSS mostly they use <script>alert('XSS')</script> payload for attacking a websites. In the case of ...
3
votes
1answer
144 views

Server based pdf signing using etoken from a client browser

I have a requirement where a PDF document is generated on the application server in a web based .Net application and the same is digitally signed and mailed to the recepient. The signing and mail ...
1
vote
0answers
64 views

authentication model using oAuth

I am planning to use facebook authentication for my website window.fbAsyncInit = function() { FB.init({ appId: 'APPID', cookie : true, xfbml : true, version : ...
-2
votes
2answers
63 views

Exploiting SQL injection union base [closed]

A PHP website ends with php?id=1 and when I place a tic it prints this error: Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in ...
3
votes
2answers
154 views

Is this an appropriate anti-CSRF method?

I have the following system in place on my web app and I'd like to know if it's secure. Cookie contains CSRF token. Application detects CSRF token in cookie. Application places token in a header. ...
4
votes
1answer
153 views

Different SSL/TLS certificates for subdomains

I have HSTS enabled on several domains that I host/maintain, and I'm using free verified certificates from a provider that only allows encryption of the root and one subdomain on the certificate. They ...
5
votes
2answers
221 views

Sandboxing untrusted user-supplied code in a web application

I am trying to create a programming game where user-supplied programs compete in battle simulations, to be used as a tool to teach and practice programming. (It will likely be a turn-based robot ...