New answers tagged

2

First as a little sidenote, a xyz.exe.com.bat.jpg file could be a technically valid image file, and should not be blocked for upload unless you willingly want to limit functionalities (which could be acceptable - just saying) Now to answer your question : a xyz.exe.jpg file or a xyz.jpg file pose almost the same threat after having been uploaded to your ...


1

It depends. If the server and people who recive the code try to use it as a PNG, the PNG viewer could not work or give an error. Also there is a website which turns JS into a valid, displayable PNG. But the code wont run unless you try to execute it. You could also rename a file hello3pm.exe to hello(special unicode symbol)3pm.exe and it'll display as ...


4

Anything can happen and what exactly happens depends on the server side code of the web application. Some believe in extensions, some believe in the content, some can be tricked with polyglot attacks, ... Thus in the best case nothing happens or you get an error because content is not allowed and in the worst case you can execute code on the server. If done ...


2

A file extension is just part of the name and by itself says nothing about the content of the file. It is only used by the OS and applications to decide what to do with the file. Thus if you have no component in your system which uses the extension for deciding what to do with the file than the extension does not matter at all and you will neither need a ...


3

Uploading a virus won't infect something. Interpreting the virus in the interpreter the virus was meant to exploit will (i.e. Acrobat opening a PDF; the OS launching an x86_64 binary; etc). This is something to think about when you evaluate your threat model. The importance of extensions File extensions are only hints to handling instructions. Only Windows ...


2

They obviously changed the rules to stop the hackers Chain DENYIN sole purpose is a blacklist of ip addresses. Obviously, this list was derived from the log files as the sources of the attack. Chain DENYOUT Clearly is meant to log and drop outbound connections to the attacking list of IP addresses. Just in case they are still in the system. Chain ...



Top 50 recent answers are included