Questions tagged [http]

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement. HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Should you compress the body of a HTTP(S) response before passing it to openssl? C++ [duplicate]

Should you compress the body of a HTTPS response before passing it to openssl? C++ I am aware of the attacks that are made possible by compressing a HTTP(s) response as explained over here. But ...
0 votes
0 answers
3 views

How does QUIC provide delivery guarantee [migrated]

I'm struggling to grasp how QUIC implements handshakes in contrast with 3 handshakes in TCP. I came across with this picture on wikipedia. As QUIC uses UDP, I don't understand how the protocol ensures ...
0 votes
0 answers
10 views

How to View HTTP(S) Headers sent FROM tinyproxy [closed]

The main pursuit of this post is to find a way to view the HTTP(S) Headers that are outgoing from my open source proxy server, Tinyproxy. I would like to accomplish this with PHP if possible, but will ...
  • 101
0 votes
0 answers
41 views

malicious dll making GET & POST requests to legit sites. What could it be doing?

Relatively new to the DFIR scene. We have an assumed breach scenario playing out right now and I noticed that there were some GET and POST requests coming from a malignant dll in a users temp ...
  • 1
0 votes
1 answer
21 views

Parse a File on Client and Send to Server Without Client Manipulating Data

I have a desktop app that takes a file format and parses it to get some JSON data that is then send to a server. My problem is figuring out if it is possible to somehow parse the data on the client ...
  • 1
0 votes
0 answers
38 views

Do I need https for a web server that will be used locally? [duplicate]

I have a web server that will be used to manage the stock of a warehouse in a factory. The web server will be accessed only locally so the clients can update and view the available stock. The server ...
-2 votes
0 answers
29 views

Intercept Host Traffic via Burp Suite (running in a Guest VMWare) [migrated]

Scenario: I have a Windows Host Machine in which I am running a VMware VM with a Linux distro (Guest Machine). In this Linux distro I am running BurpSuite. I would like to know how could I be able to ...
0 votes
1 answer
63 views

How easy is it for hackers to intercept http traffic between VPN exitnode and the destination web service without being inside the VPN or web server?

Let’s say I’m using http connection over a properly set up VPN with secure protocol and implementation. Then, most likely, the connection will be secure all the way until it exits the VPN server. But ...
  • 1
0 votes
1 answer
40 views

How does the user stay authenticated after digest authentication?

Simply put, the digest authentication goes as follows: The user tries to access some resource that requires authentication. The server responds with 401 and the www-authenticate header. The client ...
3 votes
1 answer
98 views

Is there a reason for a server-side limit on the number of HTTP headers allowed for each request?

The security team at my company has set a limit on the number of headers a HTTP request can contain (not header size, but an actual hard count limit on the number of headers). A vendor has added a few ...
  • 133
0 votes
1 answer
25 views

How is the encryption and signing handled in case of an HTTP 302 redirect to IDP for a SAML authentication request?

When an SAML Authentication request is performed, let's say that the Service Provider uses an HTTP 302 redirect. The user agent is redirected to the IdP via a GET request. This URL is provided by the ...
  • 109
0 votes
1 answer
49 views

Ways to inject malicious content during a HTTP file transfer

Assume an Apache server (http, no authentication just hosting static files) is running in my local network which is hosting some zip files. Assume User A is requesting a zip file from the Apache ...
1 vote
0 answers
42 views

Why is it a security concern to modify http.sys registry entries to allow web service to accept a longer query string?

I have an Http web service running on IIS. The Http service will be exposed to the public internet, but only authenticated client requests will be processed by the web service. The service allows ...
  • 11
0 votes
1 answer
60 views

What are the security issues with setting cookies for subdomains?

Everywhere I look, I only find explanations as to who can set who's cookies and who can access the cookies of whom. Why do we need these restrictions? More precisely: Why is it OK for a subdomain to ...
0 votes
1 answer
49 views

What is the intent behind these unknown HTTP Requests into my AWS Web Server?

I know about the usual port sniffers and mass scanners that just pop up on any web server, but this one looks interesting to me. I figured out so far that those requests aren't really an issue for my ...
0 votes
1 answer
126 views

Using two different random numbers instead of RSA Keys

Binance public API supports access to specific operations with RSA key pair. Firstly customer generates an RSA key pair. The customer uses the secret key to hash(SHA256) the query string parameters ...
0 votes
0 answers
14 views

HTTPS and Network Safety [duplicate]

Is any network safe to use so long as you are using https on the actual trusted site? For example, connecting to your banking info over plane or coffee shop wifi (assuming no one can see your screen, ...
  • 142
1 vote
1 answer
105 views

Why set max-age=0 if no-store is already set?

A result of a recent pentest suggested that the HTTP Cache-Control Header max-age=0 should be set when no-store is set. As I understand cache control, no-store is the strictest we can set; the page ...
  • 153
0 votes
1 answer
33 views

What other methods would an attacker use for making an HTTP request that isn't Fetch() or an XHR or using the DOM?

We are running user-submitted JavaScript, server-side to be executed within a headless browser that doesn't have a DOM or any child of the window or document or location objects - because these are ...
  • 46.9k
0 votes
3 answers
170 views

Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?

I am trying to connect to a supplier API but they have a whitelist of the IPs which can consume their API. I gave them my server IP so that they could add it to the whitelist but it is still not ...
0 votes
0 answers
41 views

Authenticating with unencrypted POST credentials - is it safe? [duplicate]

If a webpage is served over https and to authenticate it receives both login and password as unencrypted POST parameters (free text) is it considered unsafe?
  • 121
1 vote
0 answers
65 views

When passing through SSL from web server A to web server B (via nginx), does web server A need SSL configured as well, or just web server B?

I'm using nginx here as an example, but this is really more of a conceptual question about SSL termination and TCP that could apply to any web server. Basically, if web server A receives TCP traffic ...
0 votes
2 answers
40 views

Altering requests after authenticating

In a web mvc application I have the user login and then he is navigated to a View which presents some data fetched from the database based on a unique Id of the user. He can continue to other views to ...
  • 2,101
0 votes
1 answer
157 views

Gzip only request body of HTTPS request security BREACH?

I'm not an expert of security. I heard it's not recommended to enable GZIP compression for HTTPS requests, that would open a security issue (see SO answer: https://stackoverflow.com/a/4063496/17307650 ...
  • 135
0 votes
0 answers
31 views

cmd.jsp - Tomcat - Understanding HTTP Status Code (302)

I'm currently playing with cmd.jsp webshells on a Java webapp in tomcat. This is the request (sending via burpsuite) PUT /path/cmd.jsp HTTP/1.1 Host: 69.69.69.69 Content-Length: 579 <%@ page ...
3 votes
1 answer
137 views

Security Headers: Access-Control-Allow-Origin vs. Cross-Origin-Resource-Policy (CORP)

Can someone explain the difference between the Access-Control-Allow-Origin header and the Cross-Origin-Resource-Policy header? According to MDN: The Access-Control-Allow-Origin response header ...
  • 31
0 votes
0 answers
39 views

Is there a generic way to prevent HTTP timing attacks for sensitive requests?

If I have sensitive HTTP routes that could be subject to timing attacks (trying to guess an ID, user, etc.), is there a way without modifying the application code that it could be wrapped with a ...
  • 3,382
0 votes
1 answer
69 views

Can the services inside the VPC be authentication less?

We have a micro-services architecture, where many microservers need to talk to each other for data. These services are inside a VPC. I need to understand if the HTTP APIs of these microservices need ...
0 votes
0 answers
49 views

Decrypt HTTP payload at client

I was browsing this website and tried to look at the network calls from the API which retrieves the data. As you can see, the response payload is encrypted but the browser still shows the necessary ...
  • 1,146
0 votes
1 answer
36 views

Modifying request responses leading to unauthorized access?

I have been developing some applications lately where the content on the web app is rendered based on the request's response. For example, a user with a "free" plan has limited access, ...
  • 105
0 votes
1 answer
46 views

How to mitigate risk of exploiting open POST endpoints?

I'd like to ask for advice reg. protecting the state-altering HTTP API endpoints of the API that I'm owning (POST etc.). I'm owning a web application that exposes some HTTP endpoints to the world. ...
1 vote
1 answer
40 views

Validate HTTPS traffic at later time [duplicate]

I want to capture HTTPS traffic, save it, and validate it at a later time. I want to ensure that at a later time I'm able to validate the HTTPS traffic using the certificate which was presented at the ...
's user avatar
0 votes
1 answer
86 views

Why is Nessus report HTTP running a web server on port 80 when I'm sure that it isn't?

From a Nessus scan I have the following output regarding HTTP and the use of port 80: Info N/A 43111 HTTP Methods Allowed (per directory) Info N/A 24260 HyperText ...
  • 23
0 votes
1 answer
72 views

What security concerns can arise from using HTTP Basic-Authentication? [duplicate]

During an engagement, i have been asked by a client to explain (with the use of one or more examples) why they must update their website authentication mechanism, as they are currently using HTTP ...
2 votes
2 answers
70 views

Mitigating the performance impact of strong hashes with Basic HTTP authentication

I am trying to decide which work factor to use for our hashed passwords, and I am facing the following dilemma. Let me elaborate for a moment. Basic HTTP authentication works as follows: The user ...
  • 2,914
0 votes
1 answer
57 views

Encryption options when one-way secure channel is available

I would like to ask what encryption options are available for the following real scenario: There is an unsecure, full-duplex communication channel between a server and client There is also a secure ...
4 votes
2 answers
235 views

If the connection is encrypted, is it still unsafe to login at a public network?

It's common knowledge that one shouldn't login to personal or bank accounts on public wifi such as in a starbucks or a hotel. However, assuming that the connection is HTTPS and the passwords itself ...
0 votes
1 answer
73 views

The router (that my PC is connected to) is continuously attempting to connect through TCP80. What would be the reasons?

I have no access to the router nor do I have any administrative access to this local network. But every 5 minutes the router attempts to connect to my PC through port 80/tcp, and it attempts exactly 4 ...
2 votes
1 answer
102 views

HTTP and HSTS Web Server

If I have HSTS enforced on a web server with HTTPS 443, but HTTP port 80 is still open, does this make HTTP still accessible, or only for the first time before it's added to the browser HSTS list? I ...
  • 23
0 votes
0 answers
64 views

How to perform php post request attack with javascript sanitization?

The following code demonstrates the source code of this challenge and basically, I need to send a post request with arbitrary code to execute on the server. However, after multiple attempts Im unable ...
0 votes
2 answers
75 views

Changing HTTP to HTTPS in a URL has any effect in the security of a connection?

A lot of websites tell that HTTP is insecure, but if I manually change the address bar URL from http:// to https:// in a website I visit does it provide security regarding the connection? Because all ...
0 votes
0 answers
11 views

Is it necessary to enable TLS for internal traffic? [duplicate]

I have two applications hosted in our internal network (hosted in AWS) and in order to access both these applications, I need to connect using VPN. Since it is accessible only internally, is it ...
  • 31
22 votes
6 answers
5k views

Backend database username and password revealed in JSP Page

Recently I came across a website and when clicking on one of hyperlinks it displayed a HTTP 500 error page as shown in the image, which indicated that it is using Java Server Pages and on line 23 the ...
1 vote
2 answers
465 views

How can I make an SSL certificate for an IoT device trusted on all browsers?

I have a web server running on an IoT device, more specifically, on an ESP32. This web server serves a website that is used for managing the device and can contain some sensitive information, hence I ...
22 votes
4 answers
5k views

Are web servers that support HTTP any more vulnerable to client-run exploits than those that use HTTPS?

Does HTTPS have any unique mechanisms that protect web servers from exploits run by a malicious client (eg. SQL injection, specific browser exploits etc.)? My current understanding is that HTTPS is ...
0 votes
1 answer
88 views

Does using the "-k" flag with curl disable only the certificate verification?

I'm writing an API which is running on my own web server written in Go. I have a local environment set up to run it all under HTTS using a self signed cert and it all works great. It all works and I ...
1 vote
1 answer
56 views

owasp crs 3.0 rule functuonalityconsult

I have built a waf and using CRS 3.0, this waf can inspect the request body to limit the file size that upload to the server, I am wondering ,if I just disable this feature manually, it will cause any ...
0 votes
1 answer
70 views

Detect http traffic injection

Is there any way to detect injection into unencrypted http traffic, like files, js etc. a. just by traffic analysis b. from the client-side?
1 vote
0 answers
82 views

Is HTTP header Permissions-Policy worth using if no features are used?

From the spec at https://www.w3.org/TR/permissions-policy-1/ it seems there is no way to whitelist features with a default blacklist, and each feature must be individually disabled in every single ...
0 votes
1 answer
100 views

How do you sniff information exchanged with a site which does not use TLS/SSL?

Whenever you visit a website without HTTPS (because for whatever reason there are still quite a few of them even in 2022) typically the browser will announce that you should not enter any sensitive ...

1
2 3 4 5
29