A web browser is an application which uses http and related protocols to retrieve HTML and XML data from servers. As the web has become a critical source of information and communication, web browsers have become a critical component in information request, transfer, and management.
4
votes
1answer
214 views
How did my homepage get changed in IE?
I have rarely used IE in the past. I just use it to test how a website looks. Today all of a sudden when I went on to open IE, it opened with a homepage that wasn't set by me. It was an address of a ...
2
votes
1answer
162 views
Can JavaScript defeat source port randomization?
Can malicious JavaScript defeat source-port randomization in browsers?
I am reading a research paper which seems to claim that the answer is yes:
many browsers seem to always assign a random ...
7
votes
3answers
756 views
How does BeEF work? (working understanding)
I have recently come across the BeEF- a browser exploitation tool. In most of the articles, it is said time and again that it is developed for research and pen test purposes! Has anyone worked with ...
2
votes
3answers
419 views
How to block the websites on client machines
In our office we are blocking sites like facebook, twitter etc.The problem is that some of the users bypass the proxy and firewalls through external sites which allow us to bypass proxy, like:
...
2
votes
3answers
216 views
Can I tell which applications embed Internet Explorer at a command prompt?
A recently discovered vulnerability affects Internet Explorer versions up to version 9, running on Windows XP, Vista, and Windows 7.
This arstechnica article quotes HD Moore as saying,
Just keep ...
20
votes
2answers
1k views
From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
I'm looking for an answer that explains the issue from the prespective of a developer/engineer. What is exactly being exploited and why does it work?
Please note that I am not looking for ...
2
votes
3answers
1k views
Javascript Malware: How does it work, and how can it be mitigated?
I am wondering how malware gets served through Javascript. I've noticed a few illegitimate pop-ups while visiting some financial websites. I wonder how malware exploits work against the application ...
5
votes
4answers
4k views
Advanced techniques for detecting a proxy/getting original IP
In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used:
Firefox with a proxy ...
2
votes
2answers
191 views
HTTPS Sensitive Information and Caching
I have a website where I need to share a sensitive key with the user. Of course, I'm using HTTPS on the page. The key is put into the HTML server-side in ASP.NET. My concern is, if the user's computer ...
4
votes
3answers
185 views
Could browsers improve security of stored passwords by using setuid?
On Unix-esque systems, Mozilla Firefox stores a users' preferences, web history and stored passwords in a set of files that are readible and writeable by that particular user.
This makes sense: when ...
7
votes
4answers
1k views
Where does SSL encryption take place?
I checked the data transmission of an HTTPS website (gmail.com) using Firebug. But I can't see any encryption to my submitted data (username and password). Where does SSL encryption take place?
1
vote
0answers
29 views
What is the smallest possible Windows shellcode? [duplicate]
Possible Duplicate:
Are there any tools that focus on shellcode analysis?
Any tools available that is for shellcode analysis? what methods are used in reverse engineering?
8
votes
5answers
206 views
Is it a risk to highlight text while reading a webpage?
Whenever a user selects or highlights text on a webpage, an OnClick() event is generated. Some of the web browser security models depends on explicit end user interaction, such as OnClick(), before a ...
5
votes
1answer
139 views
Where does the responsibility lie for a XSS vulnerability
I am an avid user of Workflowy (online outliner/note taking tool) and I installed the Chrome extension 'Workflowy for Coders', which formats the text within notes.
I discovered that one of my notes ...
1
vote
3answers
211 views
Why can I read the response to this CSRF attack?
I have a website www.foo.com:8002 that I have resolve to 127.0.0.1:8002 in my hosts file. I have another (the main site) running at localhost:80
In www.foo.com:8002 the page looks like
<form ...
6
votes
3answers
452 views
Web Browsers and Cross Origin Resource Sharing
The CORS spec states that if a request method and headers are not simple (http://www.w3.org/TR/cors/#simple-cross-origin-request) then a preflight HTTP OPTIONS request is sent to see if the request is ...
6
votes
3answers
904 views
CSRF cookie vs session based tokens
I will generate a CSRF token and include it in a hidden form field. When receiving the request, I will check the form value against the value either stored in the user's session or in a cookie.
Is it ...
0
votes
0answers
69 views
How to decode this runforestrun gootkit [closed]
Infected site is hxxp://www.infraredpsi.com/Pluginlab/Scripts/menuscript.js
online scan result:
http://urlquery.net/report.php?id=141893
I can de-obfuscate the first layer of the code that use the ...
4
votes
2answers
7k views
How to determine if a browser is using an SSL or TLS connection?
I want to know whether my browser is using SSL or TLS connection if I see HTTPS.
I want to know for IE, Firefox, Chrome and Safari. I want to know the protocol version.
1
vote
4answers
139 views
how to identify whether my page is phished or normal page?
Usually I differentiate phished page and normal web pages by seeing https before the address of the web page, as the lock symbol will help us to identify.
Are there any other methods to differentiate ...
3
votes
3answers
344 views
What is the actual security of this login page?
Please visit https://devforums.apple.com
If I visit this site using my Safari 6 web browser, this page does not show the normal security indicator that secure sites normally show.
Does this ...
0
votes
3answers
2k views
Web browsing on Windows 2008 R2 terminal server (RDS)
I'm setting up a Windows 2008 R2 terminal server which users will connect to from thin clients. Since the thin clients don't have a web browser I need to allow users to surf from their terminal ...
6
votes
3answers
307 views
How secure is HTTPS with weak ciphersuites?
Today I came across the website https://mtgox.com/, which claimed to be secure because of the Verisign certificate. I checked the certificate out of curiosity (it's the first thing they claim, let's ...
2
votes
1answer
255 views
Are there any know browsers that support file URL redirection?
I've been addressing an open-redirect issue and in experimenting with the latest fix, I noticed that updating the redirect's protocol to file resulted in a blank page on the browser.
That is, ...
1
vote
0answers
95 views
What are potential use cases of script that identifies browser? [closed]
Let's say I've found a way to produce a unique string for each and every browser using pure Javascript (which makes it an alternative to UA strings).
Now what I'd like to know is what are potential ...
3
votes
2answers
465 views
Why do I get AV alerts when browsing a web page?
I'm using the latest version of Firefox and Windows is up to date. When I was browsing a webpage and clicked a link the browser displayed "connection has been reset" and AVAST poped-up saying "Alert!" ...
5
votes
2answers
4k views
Is BEAST really fixed in all modern browsers?
BEAST is said to be fixed in all modern browsers:
Chrome and Firefox
IE in Jan 2012
Opera in Dec 2011.
It's also fixed in OpenSSL since 2002.
Do these fixes mean that it's safe to use ciphers in ...
3
votes
1answer
135 views
Client-side cross-site access in SSL environment - when it's still possible to do?
I'm trying to imagine an secure sandboxed environment for an application which is big and unexplored, and may contain backdoors. It would live under chroot/virtual environment with no outgoing ...
12
votes
4answers
1k views
Why users want to disable cookies?
I just started to create a new web application. In the documentation, it is written that I have to prepare for the situation where users have disabled cookies. This is not the first time I have read ...
4
votes
2answers
138 views
Is using a “Red” and a “Green” browser to balance LOB requirements and security a good approach?
I currently work in a manufacturing company with round about 5000 computers and 6000 employees.
We use a lot of web based line of business applications (all internal, non over the Internet) in order ...
5
votes
1answer
3k views
Chrome is telling me I am receiving a forged certificate for Gmail, is someone trying to hack me?
I went to log on to https://mail.google.com this morning and I got the following error. Is someone trying to attack me or is this just a bug?
I'm on a WPA2 encrypted wireless connection using Chrome ...
0
votes
1answer
176 views
How securely use Firefox Add-on to prevent steal data?
The videos (first and second) demonstrate how a Firefox extension can collect login information used to login to websites such as Facebook.
After installing this tool/maleware as Firefox Add-on, I ...
4
votes
2answers
850 views
Does Java applets reveal the real IP address, even when using proxy or vpn?
Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
0
votes
2answers
169 views
Custom font protection?
I have a custom characters that to most people it appears as chinese, arabic or just some random symbles, it is a simple way I make sure that my written notes are readable just by need.
I have grown ...
4
votes
2answers
253 views
Workarounds for :visited CSS History reconnaissance
Several years ago it was possible to use
a:visited {
background: url('/log.php');
}
to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
4
votes
1answer
588 views
How to detect cookie stuffing attacks?
So the question is how to detect cookie stuffing attacks and how to protect against them?
In case of image-based cookie stuffing I can detect that related resources are not loaded and therefore ...
-1
votes
1answer
100 views
What was Microsoft trying to do when they had Windows Updates over their website? [closed]
What was Microsoft trying to do when they had Windows Updates over their website? Now it's completely integrated into the operating system and it seems much smoother. The Linux and Mac I've used got ...
7
votes
2answers
840 views
How to protect against clickjacking attack but allow legit iframes?
I'm aware of modern anti-clickjacking approaches, such as X-Frame-Options header or framekiller scripts. But all these tactics prevent content to be inside iframe. But what if there is a requirement ...
5
votes
3answers
663 views
What are potential security risks when using an insecure wireless connection?
If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it posse a threat even if the person is using a secure application layer protocol? What I mean by ...
-1
votes
1answer
92 views
How come FireFox came out with another release a week latter? Was a threat discovered? [closed]
I updated to FireFox 13 last week and today I got a message about there being a security update and upgrading to FireFox 14. Was a major security threat found? What justified the release of version 14 ...
-1
votes
1answer
104 views
Comparing cookie values with page parameters (i.e. href)
Could you suggest if there is any reason to compare cookie value domain, path, etc with web "location.href" and so on?
I mean - on the client side.
1
vote
1answer
510 views
HTTPS and cache injection
I understand the downside of this attack and what wrong can be done.
But I dont understand how is it done ?
Well, I need to educate myself, any pointers would be useful.
8
votes
2answers
581 views
HSTS extra security over HTTPS
Is HSTS good to use even if my servers are configured to use HTTPS (Even if HTTP is used, the rewrite rules in apache makes it to HTTPS)
Also does HSTS make even the resources like CSS, images to be ...
10
votes
4answers
463 views
Why do browsers warn about mixed content for images?
I'm dealing with a phpBB forum user who wants to set up SSL on their entire site to secure user credentials and "private" parts of the website.
However, they want to preserve the traditional forum ...
6
votes
3answers
319 views
Is it advisable to have a web browser remember login credentials?
I have a really long random password for my cellphone account and have it written down in a safe place. I only use it once a month and am considering having my browser remember it. Would there be any ...
-1
votes
2answers
78 views
What happens when and attacker changes the installed public keys in browser
I was reading about SSL. I understood that each browser comes with a predefined set of known public keys,which is then used to authenticate the messages. I was wondering what will happen when a virus ...
2
votes
3answers
316 views
Are there any addons that disable only some functionality of scripts?
Tor comes bundled with NoScript. Correct me if I'm wrong but that's because client sided scripts can determine the originating IP address regardless of who the traffic is passed through. But NoScript ...
3
votes
3answers
736 views
Do browsers allows pages loaded on one tab to access/intercept/inject data in other tabs?
I was surprised to hear from this Reuters video that it was possible for a page loaded on one tab to access and/or inject data onto another page loaded on a different tab.
TL;DW (too lazy; didn't ...
2
votes
1answer
2k views
does Avast SafeZone actually make a difference?
SafeZone is a feature in Avast Anti-Virus which is like a virtual machine that only has a web broswer. The benifit of this is that it can't be infected with spyware and isn't suseptible to keylogers. ...
3
votes
2answers
1k views
Do most browsers handle mixed encrypted and unencrypted content correctly?
In Google Chrome, when I go to an encrypted page that contains unencrypted content, I get the following pop-down, which allows me to either load or not load the insecure content, making a clear ...
