Questions tagged [http]

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement. HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

Filter by
Sorted by
Tagged with
1
vote
3answers
10k views

ModSecurity errors related to REQUEST_METHOD HTTP/1.1 and GET

I asked my host to switch on the log file, and it have increasing a lot since then. Its have been increasing with 700 mb for the last week. It’s filled with error messages related to Mod Security. ...
1
vote
4answers
4k views

Shall I need to use MD5 algorithm in both JavaScript and PHP for login authentication?

I have a login form with username and password. I post this form data to a PHP file. For security reasons I want to encrypt my password in the database and network. Now I have done now following steps....
1
vote
1answer
261 views

Is it possible to intercept HTTPS payload with a trusted CA but send it the wrong server?

I have a CA generate a cert and private key for my server. My server, however, does not have a domain name and its IP is dynamic and never static therefore validation of the host name must be ignored ...
1
vote
3answers
6k views

Is scanning a site directory considered illegal penetration testing?

Does anyone know if using Dirbuster [link] to scan for unlisted directories and their contents is (possibly) legal in say the US?
1
vote
1answer
176 views

Security disadvantages of sending a password with GET? [duplicate]

Other than over your shoulder peeping, if a password is sent using GET in plaintext over an encrypted connection, are there any extra security disadvantages or is it the same as POST?
1
vote
1answer
476 views

Would the CORS specification consider a missing Content-Type header to imply a “simple header”?

RFC 7231, Section 3.1.1.5 states: A sender that generates a message containing a payload body SHOULD generate a Content-Type header field in that message unless the intended media type of the ...
1
vote
3answers
7k views

Bettercap 2.x SSLStrip Is Not Breaking TLS (Without HSTS)

I have the latest version of bettercap. I have the latest version of Kali linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the lowest possible ...
0
votes
1answer
193 views

Refuse download request, but allow use online

How can I let end-users listening to my website's musics to play the songs, but reject their request if they are going to download the song via download manager or etc.? For example, it would be nice ...
0
votes
1answer
93 views

How does a HTTP client authenticate itself with a HTTP server?

Is it correct that there are various ways that a HTTP client can authenticate itself with a HTTP server? Are the following such ways? authorization header: for various authorization protocols (e.g. ...
0
votes
1answer
904 views

Self Signed SSL Certificate - How to verify it correctly on the client side?

For our current implementation we are using a self signed root certificate, which then is used to sign ssl certificates for our secure http connection. My question relates to the verification logic ...

1 2 3 4
5