Questions tagged [http]

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement. HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

Filter by
Sorted by
Tagged with
1
vote
0answers
17 views

Sysmon itself i trying to establish connections to the internet [migrated]

I've installed Sysmon latest version on multiple servers and as I add sysmon-modular config to the sysmon, sysmon process tries to establish connections to the internet which is odd. Some of these IPs ...
0
votes
0answers
22 views

Web path scanner evaluation criteria [closed]

I recently find out that when selecting a web path scanner, the following features should be considered, in order of importance. Functionality If you can't get it to run on your system, it's no good ...
0
votes
0answers
21 views

Fuzzing with SPIKE for HTTP and FTP [closed]

I wanted to know is there anyone doing fuzzing in SPIKE? I know SPIKE is quite old and almost every page says it has bad documentation. I found some pages but they all have the same pattern fuuzing ...
19
votes
8answers
6k views

How does one take advantage of unencrypted traffic?

Let's assume an ecommerce site works over HTTP, rather than HTTPS. What are the practical dangers here? How could an attacker exploit this? Whenever I read about dangers of unencrypted traffic, it is ...
0
votes
0answers
30 views

HTTP cookie behaviour in server response [closed]

When a client initiate a HTTP request for a server using cookies, the server replies with a cookie in the set-cookie header. I would like to know is the set cookie header sent in every reply from the ...
0
votes
1answer
69 views

Is it safe to visit any website in TOR when the Security Bar is set at Maximum? (Safest)

Someone has sent me a link on Tor which when visited instantly read that the website itself was not available and that apparently the link is broken somehow. When using Tor i use the option "...
1
vote
1answer
110 views

Secure HTTP login in an embedded (IoT) system

HTTPS in an embedded (IoT) system is (as far as I know) not necessarily a good solution. Basic Authentication is not secure. Acceptable in an internal network. Idea: Login.html (when called up) sends ...
4
votes
0answers
89 views

Is an out-of-band request via DNS by abusing the X-Forwarded-For header exploitable

By changing the X-Forwarded-For header in a request, I am able to have it sent an OOB interaction with Burp Collaborator requesting a DNS lookup of type A. Is there any risk to this vulnerability or ...
1
vote
1answer
66 views

Did Wireshark capture an update of Adobe Acrobat Reader over an unencrypted connection?

My home router is an AVM FritzBox and it's able to log all incoming and outgoing traffic in a file format readable by Wireshark. Some days ago I started capturing all traffic for about an hour to get ...
10
votes
1answer
718 views

Is basic HTTP proxy authentication secure?

I have been looking for cloud based proxies, and I notice that it's very common to authenticate to a proxy using basic auth over an unencrypted connection. I don't understand why this is considered ...
0
votes
1answer
60 views

How to know if the response is from the CDN and not the origin?

I am doing some bug hunting. I inserted a malicious payload into a request. But I am not sure if the response is from CloudFlare or the origin. Are there special headers which help me to distinguish ...
0
votes
1answer
60 views

RestApi Libsodium SealedBox end-to-end request encryption scheme

I am making an API that uses the following steps for encryption. All of this is implemented using libsodium. First of all the client has to make an initial request to the server for getting his public ...
0
votes
1answer
57 views

How to make Squid Proxy undetectable by ip-check.net? [closed]

I have setup squid proxy on a CentOs server where I set forwarded_for to delete and denied request headers on the /etc/squid/squid.conf file. However, whilst connected to the proxy, if I visit http://...
0
votes
0answers
23 views

How does AWS verify signed requests?

How does AWS request signing and verification work? Let's say I have created a signed request using this guide. How does AWS service verify this signature? I see 2 options with their respective flaws (...
1
vote
0answers
59 views

Snort Inline Mode(IPS) Routing Packet Forwarding

I'd like to build an IPS which would be a seperate endpoint than the router and/or protected servers. To achieve this I've installed to my Ubuntu server Snort with DAQ(AFPACKET). The instructions I've ...
1
vote
1answer
101 views

Isn't HTTPS enough to prevent MITM in mobile apps? Why is SSL Pinning needed?

I am making a webview that is going to be part of a native iOS and Android app, I implemented the webview using HTTPS as a protocol, and developed my NodeJS app there. But the security team from where ...
1
vote
0answers
31 views

Arbitrary query parameter reflected in server response header. Is it exploitable?

SCENARIO: If I send requests like these: http://site.com/page?safe_param=1?my_arbitrary_param=2 The server responds with a normal HTTP response but within common headers it includes also the ...
-3
votes
1answer
82 views

What type of attacks does HTTPS protect against? [closed]

What are some example attacks that could be vulnerable if HTTP is used, and that can be overcome in HTTPS? The only one I can think of is man in the middle attacks, where the intercepted traffic is in ...
1
vote
1answer
40 views

What you can do with super cookies on subdomain to harm domain?

When you search in Google for user cookies top results are VPN services that say that it's used by ISP to track the users. Wikipedia Supercookie say nothing about HTTP headers and what exactly are ...
0
votes
0answers
81 views

HTTP Headers: Document Policy vs. Permissions-Policy/Feature-Policy

I'm checking the options to harden my web app by setting the appropriate HTTP headers. Besides the Content Security Policy (CSP) there are two another approaches: Document Policy and Permissions-...
0
votes
1answer
103 views

Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts

Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one: FROM: [::...
1
vote
1answer
72 views

Why is php-fpm trying to connect somewhere on port 443?

I have nginx and php-fm set up to front a word press site. I used certbot to setup TLS. When I load any page, I see selinux violations and it looks like php-fpm is trying to reach out to some port ...
1
vote
1answer
84 views

XSS injection in the name of a file to be sent

I found a reflected XSS in a POST request that sends a file to the web server. The HTTP POST Request The HTTP 200 OK Response When I want to try to insert document.cookie in the payload, the web ...
-2
votes
1answer
130 views

Can someone tell me whats the encryption in this? [closed]

khgpd://zpn.xddspbx.nrf/j/9djwth14tmct9tf/uzdwvrrnonv.tue?gz=0 This is an encrypted text and is most prob a url....pls decode it or tell me which cipher is it, this is not for any security breaches ...
0
votes
0answers
20 views

Internet provider with http site rendering on https website [duplicate]

If I am browsing a site that is https and it renders images from another site (like google images, bing images) and some of the sites are HTTP, does the internet provider see exactly which pictures ...
2
votes
1answer
75 views

Should I check Host header or ServerName for CSRF defense when serving behind proxies?

In a CSRF defense based on checking forbidden headers, should I check Origin/Referer header against the ServerName configuration directive, or is it sufficient to simply check against the HTTP Host ...
2
votes
1answer
203 views

Man in the middle using HTTPs downgrade to HTTP

In general browsers attempt to establish a HTTPs-Connection if possible. How would you force a browser to fallback to HTTP when somebody enters asdf.xyz in the search bar of his/her browser without ...
0
votes
2answers
71 views

HSTS without auto-upgrading HTTP to HTTPS [duplicate]

I have a website hosted at https://example.com/mysite. If you navigate to http://example.com/mysite, you get a 404. Everything that comes in over HTTP gets 404'd. I was dinged on a security audit ...
6
votes
5answers
5k views

Why doesn't a simple HTTP request to display a remote web page violate the same-origin policy?

On a W3Schools page, I found that HTTP requests work like this: A client (a browser) sends an HTTP request to the web A web server receives the request, and runs an application to process it The ...
13
votes
3answers
5k views

What risks am I taking by using an http site to play a video game that just records mouse events?

There's this game at http://slither.io which I like to play. Only inputs that I give to it are space bar, and cursor location. It's not https. Are there any risks?
0
votes
1answer
67 views

Update URL over HTTP

I saw VLC (Windows) gets updates from an unencrypted URL: HTTP, not HTTPS! Do you think there's a risk for a man-in-the-middle attack?
31
votes
1answer
6k views

“google.com” is not HSTS protected?

Issue: Oftentimes people enter google.com directly in the browser's address bar without including either the http:// or https:// prefixes. Using Chrome DevTools on a fresh incognito session, I ran the ...
3
votes
1answer
89 views

Does a website's session key have to be unguessable if it's signed?

I'm creating (what I believe to be) a cryptographically hard to guess session key to keep my users logged in by generating 32 random bytes (using crypto.randomBytes). I'm storing this in a cookie (as ...
1
vote
0answers
32 views

Security Concerns with HTTP/3 / QUIC-based protocols [duplicate]

I've been seeing a large number of companies, including Cloudflare who just sent out a notice to their customers about enabling HTTP/3 via QUIC recently, touting HTTP/3 based on QUIC as 'much better' ...
0
votes
0answers
43 views

What are the security risks of trace context propagation headers?

We are implementing zipkin tracing in our product and have some hesitation about accepting and returning the propagation headers for publicly accessible http requests. The zipkin server itself is not ...
0
votes
2answers
64 views

Is it safer to send cookies in headers than the URL?

I have a browser extension. I would like to use this browser extension to send the cookie from site A to site B. I’m doing this because I want to scrape site A from site B, but this is obviously a use ...
0
votes
0answers
53 views

Which security headers should be sent with static files such as css/js/images

Of the security headers listed here: https://owasp.org/www-project-secure-headers/ which ones should be sent with static files (css, js, images etc) and what does setting them each achieve in that ...
0
votes
3answers
115 views

Https - why isn’t the initial connection encrypted / how to avoid initial suspicion?

So with https, someone can still see what website I visited, but not which pages within that website I visited, correct? why isn’t the whole process of connecting to a website - from when I start ...
0
votes
2answers
66 views

Can we read HTTP cookie value? [closed]

In one of the applications I'm testing, the cookie contains the username (set:cookie: username) in the HTTP header. Is it possible to read these cookie values using any methods? The site uses HTTPS.
0
votes
1answer
234 views

Nessus Plugin “HTTP Smuggling Detection” failing due to support for http/1.1 - how to overcome?

A new Nessus plugin (140735 - HTTP Smuggling Detection) was very recently incorporated into Tenable's PCI template and is now beeing flagged as a "medium" vulnerability and causing scans to ...
0
votes
1answer
57 views

Exploit HTTP arbitrary methods

A web server allows to use HTTP methods like DAMN, FUCC, PASTA with the same effect as a GET request: for example executing GET /this.txt brings to the same result as PIZZA /this.txt. Is ...
0
votes
0answers
100 views

Is this HTTP authorization token secure?

I am new to backend development and read about Authorization methods such as Basic, Bearer and OAuth 2.0. I haven't use any of these directly, but used a token based implementation. User logs in with ...
2
votes
1answer
58 views

Should the Secure cookie flag also be set on HTTPS only websites?

Should the cookie secure flag be set on websites which are served only through HTTPS? The Secure attribute tells the browser to only send the cookie if the request is being sent over a secure channel ...
0
votes
1answer
45 views

How to prevent HTTP header injection attack in J2EE Web application? Is there any library (Maven dependency) available for this purpose?

My J2EE application is vulnerable to HTTP header injection attack. I want to make it secure from this vulnerability. Also, I am searching if any library (Maven dependency) available for this.
1
vote
3answers
68 views

Should all the headers reported by securityheaders.io be considered as findings?

A lot of websites scanned with securityheaders.io are missing different headers. Should all of these headers be reported as findings or just few of them which are more critical?
0
votes
1answer
135 views

HTTP Request Smuggling Basics

I am currently trying to learn HTTP Request Smuggling vulnerability to further enhance my pen testing skills. I have watched a couple of videos on Youtube and read articles online regarding it but ...
0
votes
1answer
70 views

Internal HTTPS recommended security practices

So I'm by no means a security expert. I'm just a recently graduated software developer who is working on a contract project and I want to ensure I'm taking appropriate security measures for my client. ...
0
votes
1answer
534 views

how can I bypass recaptcha while using python requests? [closed]

How can I bypass the recaptcha on a website with python requests so that I don't have to solve it?
-2
votes
1answer
251 views

How can I fuzz a http server? [closed]

I was researching fuzzing using AFL and hongofuzz and they mainly support applications that run in the terminal. After that I came across a list of resources for network fuzzers, and found afl-net ...
0
votes
1answer
205 views

How do I redirect HTTPS site to another HTTPS site over LAN using a linux? [closed]

Is there a tool, or a command for linux that can make possible to redirect HTTPS site to another HTTPS site on LAN? i'm using Kali Linux, and all the tools and commands that i found was to redirect ...

1
2 3 4 5
26