Questions tagged [http]

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement. HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

Filter by
Sorted by
Tagged with
1 vote
1 answer
245 views

Utility of HTTP headers for a REST API

Can somebody confirm me that the HTTP-XXS-protection header and the X-content-type header is useless in the case of a REST api who provide only json to clients ? Can someone explain me why exaclty ? ...
user avatar
  • 11
0 votes
0 answers
297 views

Bettercap TCP proxy upstream server

I am using bettercap command line to perform a Man in the Middle attack on my LAN network with an EDUCATIONAL purpose (of course!). I want to intercept the TCP traffic, with the intention to view on ...
user avatar
-2 votes
2 answers
358 views

This client doesn't verify which representation it requested, while expecting a specific one. What are the security implications? [closed]

I am currently investigating a mobile app API. There is a feature which fills in a form in the app automatically. The user supplies a string which contains all the compressed form data. And then the ...
user avatar
2 votes
1 answer
313 views

Getting numerous HEAD requests by Java user agents to resources that require authentication to view within a web application. Should I block them?

I have recently started using Cloudflare's firewall in front of a web application. This app has a limited user base of selected applicants and they must log in to view anything. There is no public ...
user avatar
  • 175
0 votes
1 answer
215 views

Using GET request to find html file

I'm doing a basic CTF at the moment. Using, GET / HTTP/1.1 Host: subdomain.domain.com I am getting the response: <a href="/c98efc0d-5c3f-45ec-996a-2cb82d35ed26.html">follow this link to get ...
user avatar
2 votes
2 answers
767 views

What attacks are httpOnly cookies intended to prevent?

I know that HttpOnly attribute restricts the cookie from being accessed by JavaScript etc. Is there any specific attacks regarding this issue? Can cookie theft and hijacking be counted as attacks ...
user avatar
0 votes
0 answers
105 views

Downloading unencrypted data with Android app

I'm writing a relatively simple app for Android, which should get GPS coordinates and detect if the device is inside one of defined polygons. These polygon definitions I intend to download from a ...
user avatar
  • 101
0 votes
1 answer
396 views

Signing HTTP requests with JWS

Looking over the spec for JSON Web Signature (JWS), I realise that it doesn't seem to specify anything that is HTTP-specific in terms of the payload. Specifically, signing HTTP headers and bodies (say,...
user avatar
2 votes
1 answer
3k views

Missing HTTPOnly Cookie Attribute in Laravel 7 [duplicate]

I have a Laravel site, I thought I patched this issue already. I got these in my session.php 'secure' => true, 'http_only' => true, But OpenVas still detected that I still need to it. It ...
user avatar
  • 125
0 votes
0 answers
75 views

Is there a way to limit cookies to certain hosts in HTTP?

Using Nginx, I hope to restrict the permissible hosts for cookies. My initial intention was to employ a Content Security Policy for this purpose, but I don't see an obvious way to do this via a CSP. ...
user avatar
  • 190
0 votes
0 answers
416 views

Monitor HTTPS URL logging of a specific device of a Network

Goal The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store. Ex. Alexa, Chromecast, and maybe ...
user avatar
  • 125
1 vote
1 answer
185 views

Why did browser authors not make 127.0.0.1/localhost-hosted webpages skip the referrer?

For a long time, I was so convinced that 127.0.0.1/localhost-hosted webpages, that is, with URLs such as: http://127.0.0.1/MySecretControlPanel/sensitive.php?stuff=goes&here=dude ... did not ...
user avatar
  • 11
0 votes
1 answer
249 views

What is the traffic volume of practical DDoS attacks

I wonder what is the volume of traffic, in terms of requests/second, forms a legit DDoS attack against a website. I know it highly depends on the website and where it is hosted. But is there any real-...
user avatar
  • 665
1 vote
1 answer
1k views

Private ip address revealed by nginx, should I worry?

I run nikto on a server, let's say www.example.com and it says the following: OSVDB-630: The web server may reveal its internal or real IP in the Location header via a request to / over HTTP/1.0. ...
user avatar
  • 459
3 votes
1 answer
138 views

What risks exist when executing HTTP requests to user-submitted resources? [duplicate]

Context I'm working on an application where one of the features requires scraping metadata from resources available over HTTP/HTTPS. These resources are submitted by end-users in the form of a URL, ...
user avatar
  • 133
33 votes
7 answers
10k views

If I'm currently on a website and disable my VPN, is my ISP or the web server immediately aware of the change or does a page refresh have to occur?

For example: I'm browsing my favorite website with my favorite VPN enabled. I disable my VPN while I'm still on a page of the website. I haven't clicked any links yet, I haven't went back to the ...
user avatar
0 votes
4 answers
2k views

Any way to avoid man-in-the-middle over http

If I have a web-page being sent over the Internet without encryption, anybody in the middle can change it. So if I put a public key of a server inside, the attacker can replace it with his own and ...
user avatar
  • 49
3 votes
1 answer
10k views

Calculate Content-Length (HTTP Request Smuggling)

I am trying to understand more about HTTP Request Smuggling and I have been reading this article (https://portswigger.net/web-security/request-smuggling). Content-Length represents the length of the ...
user avatar
  • 177
1 vote
2 answers
200 views

What is the most powerful type of DDOS/DOS attack? [closed]

What I mean is what protocol are best to DOS something like TCP, UDP, HTTP?
user avatar
0 votes
1 answer
263 views

Why do we want a timeout on a server?

This question is quite general as I want to understand the (security) benefits of a 'timeout' in general. For our Nginx proxy-server, we have been using HTTP/S timeouts where we came across the ...
user avatar
  • 103
0 votes
1 answer
79 views

HTTP/HTTPS/GET/POST : in which cases can a malicious router between client and server find a secret information? [duplicate]

Let's say I connect a safe server example.com. In which case(s) can a malicious router in the middle of the route (or my ISP) see secret? 1) HTTP + GET, secret in URL query parameter : http://...
user avatar
  • 941
7 votes
1 answer
609 views

Does PUT or DELETE offer any security advantage over GET or POST?

I have a REST API and I want to handle all HTTP requests via POST. Is there any security issue in using just POST to perform all CRUD operations requested by a user, which sends JSON specifying the ...
user avatar
  • 203
1 vote
1 answer
226 views

Why is my web site being scanned for license.txt, and should I be worried?

Lately I am seeing multiple daily 404s for variations of "license.txt", e.g., "wordpress/license.txt", "blog/license.txt", "old/license.txt", "new/license.txt". Here's a little snippet of slightly ...
user avatar
  • 113
2 votes
1 answer
12k views

"X-Original-URL" and "X-Rewrite-URL" Related Vulnerabilities

I am going through the Burpsuite Academy Training on Access Control and I came across a section I still don't fully understand. In their reading, they explain: Some application frameworks support ...
user avatar
1 vote
2 answers
1k views

Sending token through GET vs POST

Looking for recommendations for security in sending token (e.g. JWT Token) through a GET vs POST request to the server. There are two options: Sending token through Headers as part of HTTP GET ...
user avatar
  • 13
-1 votes
3 answers
14k views

Is TCP Port 80 (HTTP) vulnerable?

I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
user avatar
4 votes
1 answer
214 views

Does signing of HTTP requests have any benefit when using TLS?

Signing HTTP requests is all the rage nowadays. The benefits of doing so when communicating over an insecure channel are clear. With signatures you can bring message integrity and authentication to ...
user avatar
  • 593
1 vote
2 answers
481 views

Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?

Is blocking outgoing HTTP connections from a home network and only allowing HTTPS connections reasonable? Will it reduce the chances of a man in the middle attack?
user avatar
3 votes
3 answers
204 views

Is server startup time sensitive information?

Let's say we have a web server. Server startup time is the time the server process was started. Say, the startup time was being leaked via its response headers due to the carelessness of a ...
user avatar
  • 133
2 votes
2 answers
101 views

What is the relevance on HSTS on HTTP application?

We all know that HSTS should be implemented on HTTPS application. Recently, I came across an application HSTS implemened on HTTP application. I need to answer to the client. According to me, HSTS ...
user avatar
  • 49
5 votes
1 answer
4k views

Is it safe to set rejectUnauthorized to false when using Heroku's Postgres database?

I am trying to put some fields in a Postgres database hosted on a Heroku app and it keeps returning this error: Error: self signed certificate code: 'DEPTH_ZERO_SELF_SIGNED_CERT' I have tried adding ...
user avatar
  • 53
1 vote
1 answer
426 views

How to conduct XSS via message body or HTTP cookie?

I am reading Hackers Handbook and in one chapter it says: "Parameters submitted within the URL query string, message body, and HTTP cookies, are the most obvious entry points..." I understand that ...
user avatar
  • 25
6 votes
1 answer
338 views

Is the ACME HTTP-01 challenge secure against MITMs?

Many certificate authorities these days use the ACME protocol to automate the process of certificate issuance. This includes verifying that the applicant is the owner of the domain. And the most ...
user avatar
  • 163
2 votes
2 answers
176 views

Strict Transport Security (HSTS) HTTP Response Header Security Related Question

I always thought HSTS headers were server specific, what reason would cause this header to not be invoked across certain URI endpoints i.e. HSTS header is in response to the root direct /, as well as /...
user avatar
0 votes
1 answer
153 views

It seems someone or something is replicating my requets

I have a personal service which is deployed on one VPS. The service works based on http requests, and it is due specific goal and handling three types of requests. The order matters in the requests. ...
user avatar
  • 101
0 votes
2 answers
130 views

Simple and Universal way to password-protect existing webservices that are exposed to internet

There are many tools, devices and programs that by default run a http server and expose a user interface on port 80. Even my coffee machine has a web ui that it provides on port 80. Now, it's easy to ...
user avatar
0 votes
1 answer
1k views

OAuth2 - Sending a hash of your client_secret when using the client credentials grant instead of the secret

I'm working on an API that I'd like to be accessible internally by other servers as well as devices that I consider both as confidential private clients. Devices are considered private clients because ...
user avatar
  • 111
0 votes
1 answer
1k views

What is the risk of downloading files from a non-secured sites

I am a programmer. I recently developed an automation tool that periodically downloads couple of files over a non-secured (http) url. Two files are: A text file that is very tiny (under 10KB) which ...
user avatar
  • 101
3 votes
2 answers
140 views

What does "connection" mean in context of request smuggling

I recently read about request smuggling. This is a very interesting attack that I didn't know about. A vulnerability to this was recently discovered at Slack, disclosed responsibly and a bounty was ...
user avatar
  • 1,988
25 votes
6 answers
15k views

Is HTTPS required for local network server to server communication

I am building web applications for my customer's company. At the server side, there will be 2 kinds of server to server network communication. Separated REST API servers making requests among each ...
user avatar
2 votes
1 answer
355 views

Why we should not mix http and https when using iframes?

In the administration of advanced iframe I came across following: "Please do not use a different protocol for the iframe: Do not mix HTTP and HTTPS if possible!". Please explain the below points. ...
user avatar
0 votes
5 answers
2k views

Are downloads from http connections safe?

When downloading a file is there a safety concern when downloading from http connections/websites not https?
user avatar
  • 33
1 vote
1 answer
2k views

Hydra hangs after attempts or returns all passwords valid

I'm using the Hydra tool on Kali Linux 2020.1 and I'm trying to brute force a login at hack.me http://s123056-104737-qer.sipontum.hack.me/login.php. My problem is that whenever I run Hydra it gets ...
user avatar
1 vote
1 answer
185 views

Which certificate on my computer is used to make a SSL/TLS handshake

When connecting to a specific website(www.test.yyy.com) inside of an organisation SSL/TLS handshake is performed. From my understanding, I would say that one of my personal certificates on computer is ...
user avatar
4 votes
1 answer
7k views

Is cookie information stored on the server side? [closed]

I thought cookies are stored on client side only, as files. Then I realize if cookies are not stored on server side, how could a server match a cookie just received from a client to some session or ...
user avatar
  • 607
1 vote
2 answers
100 views

Does HTTP protocol interpret contents of cookies and query strings in URL, whereas it doesn't interpret message bodies?

HTTP knows to look for user names and passwords in authorization headers in HTTP requests. So this is at HTTP level. Is it correct that putting user passwords into message bodies of HTTP requests is ...
user avatar
  • 607
0 votes
1 answer
274 views

How does a HTTP client authenticate itself with a HTTP server?

Is it correct that there are various ways that a HTTP client can authenticate itself with a HTTP server? Are the following such ways? authorization header: for various authorization protocols (e.g. ...
user avatar
  • 607
2 votes
2 answers
2k views

NONCE not supported in Asp.Net for CSP implementation

Is NONCE supported in Asp.Net when implementing Content-Security-Policy header to protect from XSS ?? I read that NONCE was not supported in Asp.Net, however I read another simple article, that shows ...
user avatar
3 votes
1 answer
4k views

Is the HTTP method OPTIONS secure nowadays?

I've read How to exploit HTTP Methods: OPTIONS - this is a diagnostic method, which returns a message useful mainly for debugging and the like. This message basically reports, surprisingly, which ...
user avatar
12 votes
2 answers
2k views

Secure HTTP Headers - where should be implemented, WAF or code level?

I have a REST API exposed to the Internet and another application with form-based authentication. These apps are behind a Web Application Firewall. Question is, where I should implement the below ...
user avatar
  • 151

1
3 4
5
6 7
28