Questions tagged [http]

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement. HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

How can I change HTTP header parameters to test a website with automatic tools? [closed]

In order to access the login page of a webpage I have to add to the HTTP request header the following two parameters: X-Forwarded-For: 192.168.32.3 Change the user-agent field value Thus, for ...
2
votes
2answers
78 views

What attacks are httpOnly cookies intended to prevent?

I know that HttpOnly attribute restricts the cookie from being accessed by JavaScript etc. Is there any specific attacks regarding this issue? Can cookie theft and hijacking be counted as attacks ...
0
votes
0answers
29 views

Downloading unencrypted data with Android app

I'm writing a relatively simple app for Android, which should get GPS coordinates and detect if the device is inside one of defined polygons. These polygon definitions I intend to download from a ...
0
votes
1answer
30 views

JWS: signing HTTP requests

Looking over the spec for JSON Web Signature / JWS https://tools.ietf.org/html/rfc7515, I realise that it doesn't seem to specify anything that is HTTP-specific in terms of the payload. Specifically, ...
0
votes
1answer
37 views

Missing HTTPOnly Cookie Attribute in Laravel 7 [duplicate]

I have a Laravel site, I thought I patched this issue already. I got these in my session.php 'secure' => true, 'http_only' => true, But OpenVas still detected that I still need to it. It ...
1
vote
0answers
6 views

Proxy Failover Advice [migrated]

Overview I'm currently deploying a pair of HA firewall devices that will act as a transparent forward proxy (traffic will be directed through the proxy via routing rather than configuring a proxy URL ...
0
votes
0answers
30 views

Is there a way to limit cookies to certain hosts in HTTP?

Using Nginx, I hope to restrict the permissible hosts for cookies. My initial intention was to employ a Content Security Policy for this purpose, but I don't see an obvious way to do this via a CSP. ...
0
votes
0answers
53 views

Monitor HTTPS URL logging of a specific device of a Network

Goal The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store. Ex. Alexa, Chromecast, and ...
0
votes
0answers
69 views

Abnormal User-Agent value in GET request

I came a cross some WAF logs that alert on Illegal URL Length. When I investigated the logs, I noticed weird user-agent value: 7375716F62756415670E1005007A7C68721200333F23323F770233342F2E37 I have ...
1
vote
1answer
36 views

Why did browser authors not make 127.0.0.1/localhost-hosted webpages skip the referrer?

For a long time, I was so convinced that 127.0.0.1/localhost-hosted webpages, that is, with URLs such as: http://127.0.0.1/MySecretControlPanel/sensitive.php?stuff=goes&here=dude ... did not ...
0
votes
1answer
92 views

What is the traffic volume of practical DDoS attacks

I wonder what is the volume of traffic, in terms of requests/second, forms a legit DDoS attack against a website. I know it highly depends on the website and where it is hosted. But is there any real-...
1
vote
1answer
59 views

Private ip address revealed by nginx, should I worry?

I run nikto on a server, let's say www.example.com and it says the following: OSVDB-630: The web server may reveal its internal or real IP in the Location header via a request to / over HTTP/1.0. ...
3
votes
1answer
65 views

What risks exist when executing HTTP requests to user-submitted resources? [duplicate]

Context I'm working on an application where one of the features requires scraping metadata from resources available over HTTP/HTTPS. These resources are submitted by end-users in the form of a URL, ...
34
votes
7answers
8k views

If I'm currently on a website and disable my VPN, is my ISP or the web server immediately aware of the change or does a page refresh have to occur?

For example: I'm browsing my favorite website with my favorite VPN enabled. I disable my VPN while I'm still on a page of the website. I haven't clicked any links yet, I haven't went back to the ...
0
votes
4answers
2k views

Any way to avoid man-in-the-middle over http

If I have a web-page being sent over the Internet without encryption, anybody in the middle can change it. So if I put a public key of a server inside, the attacker can replace it with his own and ...
0
votes
1answer
49 views

Calculate Content-Length (HTTP Request Smuggling)

I am trying to understand more about HTTP Request Smuggling and I have been reading this article (https://portswigger.net/web-security/request-smuggling). Content-Length represents the length of the ...
1
vote
2answers
85 views

What is the most powerful type of DDOS/DOS attack? [closed]

What I mean is what protocol are best to DOS something like TCP, UDP, HTTP?
0
votes
1answer
67 views

Why do we want a timeout on a server?

This question is quite general as I want to understand the (security) benefits of a 'timeout' in general. For our Nginx proxy-server, we have been using HTTP/S timeouts where we came across the ...
0
votes
1answer
35 views

HTTP/HTTPS/GET/POST : in which cases can a malicious router between client and server find a secret information? [duplicate]

Let's say I connect a safe server example.com. In which case(s) can a malicious router in the middle of the route (or my ISP) see secret? 1) HTTP + GET, secret in URL query parameter : http://...
7
votes
1answer
204 views

Does PUT or DELETE offer any security advantage over GET or POST?

I have a REST API and I want to handle all HTTP requests via POST. Is there any security issue in using just POST to perform all CRUD operations requested by a user, which sends JSON specifying the ...
1
vote
1answer
120 views

Why is my web site being scanned for license.txt, and should I be worried?

Lately I am seeing multiple daily 404s for variations of "license.txt", e.g., "wordpress/license.txt", "blog/license.txt", "old/license.txt", "new/license.txt". Here's a little snippet of slightly ...
1
vote
1answer
496 views

“X-Original-URL” and “X-Rewrite-URL” Related Vulnerabilities

I am going through the Burpsuite Academy Training on Access Control and I came across a section I still don't fully understand. In their reading, they explain: Some application frameworks support ...
1
vote
2answers
78 views

Sending token through GET vs POST

Looking for recommendations for security in sending token (e.g. JWT Token) through a GET vs POST request to the server. There are two options: Sending token through Headers as part of HTTP GET ...
0
votes
0answers
39 views

Trying to use SNORT to alert all non-http traffic on port 80

I am using Snort 2 and I can't find anything that will specifically rule out the HTTP traffic so that I can alert for any other traffic coming in (or out) on port 80.
0
votes
3answers
180 views

Is TCP Port 80 (HTTP) vulnerable?

I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
5
votes
1answer
113 views

Does signing of HTTP requests have any benefit when using TLS?

Signing HTTP requests is all the rage nowadays. The benefits of doing so when communicating over an insecure channel are clear. With signatures you can bring message integrity and authentication to ...
1
vote
2answers
83 views

Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?

Is blocking outgoing HTTP connections from a home network and only allowing HTTPS connections reasonable? Will it reduce the chances of a man in the middle attack?
3
votes
3answers
147 views

Is server startup time sensitive information?

Let's say we have a web server. Server startup time is the time the server process was started. Say, the startup time was being leaked via its response headers due to the carelessness of a ...
2
votes
2answers
60 views

What is the relevance on HSTS on HTTP application?

We all know that HSTS should be implemented on HTTPS application. Recently, I came across an application HSTS implemened on HTTP application. I need to answer to the client. According to me, HSTS ...
1
vote
1answer
240 views

Is it safe to set rejectUnauthorized to false when using Heroku's Postgres database?

I am trying to put some fields in a Postgres database hosted on a Heroku app and it keeps returning this error: Error: self signed certificate code: 'DEPTH_ZERO_SELF_SIGNED_CERT' I have tried adding ...
1
vote
1answer
56 views

How to conduct XSS via message body or HTTP cookie?

I am reading Hackers Handbook and in one chapter it says: "Parameters submitted within the URL query string, message body, and HTTP cookies, are the most obvious entry points..." I understand that ...
1
vote
1answer
60 views

Is the ACME HTTP-01 challenge secure against MITMs?

Many certificate authorities these days use the ACME protocol to automate the process of certificate issuance. This includes verifying that the applicant is the owner of the domain. And the most ...
2
votes
2answers
57 views

Strict Transport Security (HSTS) HTTP Response Header Security Related Question

I always thought HSTS headers were server specific, what reason would cause this header to not be invoked across certain URI endpoints i.e. HSTS header is in response to the root direct /, as well as /...
0
votes
1answer
64 views

It seems someone or something is replicating my requets

I have a personal service which is deployed on one VPS. The service works based on http requests, and it is due specific goal and handling three types of requests. The order matters in the requests. ...
0
votes
2answers
92 views

Simple and Universal way to password-protect existing webservices that are exposed to internet

There are many tools, devices and programs that by default run a http server and expose a user interface on port 80. Even my coffee machine has a web ui that it provides on port 80. Now, it's easy to ...
0
votes
1answer
98 views

OAuth2 - Sending a hash of your client_secret when using the client credentials grant instead of the secret

I'm working on an API that I'd like to be accessible internally by other servers as well as devices that I consider both as confidential private clients. Devices are considered private clients because ...
0
votes
0answers
82 views

Hydra Brute-force attack on Gitlab doesn't work!

I'm using hydra to test my organization's security since our GitLab is accessible online, I wanted to make sure the security of the login itself before implementing other types of security measure (e....
0
votes
1answer
47 views

What is the risk of downloading files from a non-secured sites

I am a programmer. I recently developed an automation tool that periodically downloads couple of files over a non-secured (http) url. Two files are: A text file that is very tiny (under 10KB) which ...
2
votes
1answer
43 views

What does “connection” mean in context of request smuggling

I recently read about request smuggling. This is a very interesting attack that I didn't know about. A vulnerability to this was recently discovered at Slack, disclosed responsibly and a bounty was ...
24
votes
6answers
7k views

Is HTTPS required for local network server to server communication

I am building web applications for my customer's company. At the server side, there will be 2 kinds of server to server network communication. Separated REST API servers making requests among each ...
0
votes
0answers
61 views

Remotely poisoning Cloudflare's cache servers by James Kettle's Web Cache Poisoning Attack?

I am recently exploring and playing with James Kettle's Practical Web Cache Poisoning attack. The last part of his post mentioned that Cross-Cloud Poisoning is possible, however, I can't find a way to ...
2
votes
1answer
112 views

Why we should not mix http and https when using iframes?

In the administration of advanced iframe I came across following: "Please do not use a different protocol for the iframe: Do not mix HTTP and HTTPS if possible!". Please explain the below points. ...
0
votes
5answers
110 views

Are downloads from http connections safe?

When downloading a file is there a safety concern when downloading from http connections/websites not https?
1
vote
1answer
223 views

Hydra hangs after attempts or returns all passwords valid

I'm using the Hydra tool on Kali Linux 2020.1 and I'm trying to brute force a login at hack.me http://s123056-104737-qer.sipontum.hack.me/login.php. My problem is that whenever I run Hydra it gets ...
0
votes
1answer
72 views

Which certificate on my computer is used to make a SSL/TLS handshake

When connecting to a specific website(www.test.yyy.com) inside of an organisation SSL/TLS handshake is performed. From my understanding, I would say that one of my personal certificates on computer is ...
1
vote
1answer
985 views

Is cookie information stored on the server side? [closed]

I thought cookies are stored on client side only, as files. Then I realize if cookies are not stored on server side, how could a server match a cookie just received from a client to some session or ...
1
vote
2answers
55 views

Does HTTP protocol interpret contents of cookies and query strings in URL, whereas it doesn't interpret message bodies?

HTTP knows to look for user names and passwords in authorization headers in HTTP requests. So this is at HTTP level. Is it correct that putting user passwords into message bodies of HTTP requests is ...
0
votes
1answer
87 views

How does a HTTP client authenticate itself with a HTTP server?

Is it correct that there are various ways that a HTTP client can authenticate itself with a HTTP server? Are the following such ways? authorization header: for various authorization protocols (e.g. ...
0
votes
1answer
114 views

NONCE not supported in Asp.Net for CSP implementation

Is NONCE supported in Asp.Net when implementing Content-Security-Policy header to protect from XSS ?? I read that NONCE was not supported in Asp.Net, however I read another simple article, that shows ...
2
votes
1answer
150 views

Is the HTTP method OPTIONS secure nowadays?

I've read How to exploit HTTP Methods: OPTIONS - this is a diagnostic method, which returns a message useful mainly for debugging and the like. This message basically reports, surprisingly, which ...

1
2 3 4 5
25