Questions tagged [url]
The url tag has no usage guidance.
190
questions
0
votes
0answers
35 views
How to intercept application specific MIME types used by 3rd party (Windows) browser/plugins apps?
I'm trying to intercept and decipher scripted code that is sent to a previously installed Windows application, after a user have clicked on a particular URL in their web browser which is somehow ...
0
votes
1answer
37 views
Tools to analyze if the URL is suspicious/Malicious? [closed]
What are the tools that a cyber security analyst needs to analyze the URL to determine if it is a suspicious/Malicious one.
3
votes
1answer
70 views
How to create custom exploit https requests to test a PHP framework [closed]
I am working on the auto-routing functionality of Codeigniter 4 and I'd like to test it by sending some nasty exploit-type HTTPS requests to make sure it properly resists mischief. E.g., request a uri ...
1
vote
1answer
56 views
What are the risks associate with accessing Same web application with two different URLs?
We have done vulnerability analysis with third party security team. They have mentioned one point as critical findings but i don't understand risk associated with it and suggested remedial action also ...
0
votes
0answers
17 views
Security implications of protecting private data with a long URI exclusively [duplicate]
A website hosts private/personal information at a very long and unpredictable URI, yet access to this URI is completely unauthenticated. Are there any major security issues with this?
I can think of ...
27
votes
4answers
8k views
Could receiving a URL link, not clicking on it, ever pose a security problem?
Could receiving in a text or an email, a URL link just like https://security.stackexchange.com/questions/ask of a website, which could be a pernicious one, ever pose a security problem at all? What I ...
21
votes
3answers
6k views
Can ISPs selectively block a page URL on a HTTPS website leaving its other page URLs alone?
I want certain web pages blocked (within my country) by my Govt on a website that uses HTTPS on all pages. My Govt agrees that the specific URLs need to be blocked but expresses helplessness as their ...
0
votes
1answer
63 views
Can just clicking on a malicious link lead to hacking of my device? [duplicate]
I was not sure about it and I got some answers from internet but didn't get the logical reasoning behind it.
If I just click on a malicious link it might open a new tab, or it might download something....
0
votes
2answers
151 views
Is it standard practice to hide where links point in a legitimate email?
Someone in our family recently requested a password change for a website (Costco). Soon after requesting, they received an email with the standard "click the link below to reset", followed ...
0
votes
1answer
61 views
Is a QR code with a secret URL that changes every 5th minute secure?
I need to verify that survey respondents are in the same physical room or video chat (to prevent industry espionage). The respondents can join by scanning a QR-code that opens a URL which embeds a ...
1
vote
0answers
45 views
Best practices for handling links in discussion posts
Let's say I have a site like stack overflow. People post comments with - possibly - links to external sites. Is there some "standard" set of rules to make it reasonably safe for users and ...
-2
votes
1answer
132 views
Can someone tell me whats the encryption in this? [closed]
khgpd://zpn.xddspbx.nrf/j/9djwth14tmct9tf/uzdwvrrnonv.tue?gz=0
This is an encrypted text and is most prob a url....pls decode it or tell me which cipher is it, this is not for any security breaches ...
1
vote
2answers
393 views
How to not use database identifiers in a URL in the context of a REST API
During my IT school years, I was told that including rows identifiers from a database in the resource URL, in the context of a REST API, is a bad practice. To my understanding, the rationale behind ...
22
votes
3answers
6k views
What's a “safe” URL shortening algorithm?
The situation: Currently, we are sending out emails and SMS to our users, which include a link to a form that each user has to fill out on a regular basis (an "eDiary"). As we need to be ...
0
votes
0answers
51 views
Information exposure through query strings in url of a POST request [duplicate]
I can't seem to find any information online for when there is information exposure through query strings in URL of a POST request.
I understand it is an issue for when it's sent in HTTP GET. Wondering ...
1
vote
1answer
214 views
Is this “secure email” mechanism my bank wants me to use best practice?
So, yesterday I needed to sign & scan some forms for my bank, a credit union. Nothing hugely confidential, except it has some account numbers on it. But still, I was a bit concerned, so the ...
0
votes
1answer
51 views
token _csrf in an url POST
I wanted to know if it was a bad thing to have a _csrf token stored in a url. I saw that in a POST request that allows me to upload a file, the _csrf token was displayed in the url. Is it sensitive to ...
0
votes
1answer
202 views
How to secure my PHP url endpoints
I have a backend that I developed on PHP/MySql which will provide some URL endpoints in order to get data or post data. I am using those URL endpoints in my application (WebGL application). Now, the ...
1
vote
2answers
65 views
How some sites prevent cross-site requests through referrer although there are redirections allowed
I read about referrer header that some sites use to allow only requests made by the pages of the site. So if I make a page hacker.com, and let this page make a request to https://twitter.com/i/flow/...
0
votes
0answers
68 views
Random URLs to hide assets [duplicate]
Say I own a domain name www.example.com and I'd like to host some resources on it, but being reasonably hidden from the public.
Since a 256 bits has a sufficiently large entropy to prevent an ...
1
vote
1answer
118 views
How short can a shortened base 62 url path be and be reasonably protected from a brute force attack?
If one is creating pseudo-random base 62 url paths, and one didn't want those paths to be reasonably vulnerable to brute force attack. How short could they be?
Reasoning
Now one could have expiring ...
1
vote
1answer
39 views
Is this url verification with startsWith secure?
I would like to know if this code is secure to validate that a url is from my domain before loading it a webview in android :
if (!url.startsWith("https://www.example.com/test/")){
// don't load ...
1
vote
0answers
131 views
How to unencode email urls rewritten by Black Spider [closed]
Since a few months, many organisations have urls in incoming mail rewritten to be redirected through a checking service (Outlook Safelinks, Proofoint, FireEye, Black Spider/Forcepoint). Because this ...
1
vote
0answers
130 views
What type of attack is this? '[0]
This is the example query: GET directory/file.txt?lang=it'[0] HTTP/1.1
I don't know what language it is. The ' (single quote) reminds me of a SQL Injection.
I don't think it's a typo because I saw ...
62
votes
3answers
6k views
Security risks of fetching user-supplied URLs
We are considering to add the following feature to our web application (an online product database, if it matters):
Instead of uploading an image, the user can provide the (self-hosted) URL of an ...
0
votes
1answer
39 views
HTTP/HTTPS/GET/POST : in which cases can a malicious router between client and server find a secret information? [duplicate]
Let's say I connect a safe server example.com.
In which case(s) can a malicious router in the middle of the route (or my ISP) see secret?
1) HTTP + GET, secret in URL query parameter : http://...
1
vote
3answers
230 views
Username in browser history (url) - is this a security problem?
We have a client complaining that there is PII in the browser history (as in the persistent history you get to through your browser's menu - Ctrl + H in Chrome). For example, the URL for editing a ...
2
votes
1answer
226 views
URL Contains Sensitive Data - Alternative Besides Switching To Post?
One of my company's clients recently produced an application security assessment report, noting a list of violations based on OWASP's top 10 list of web application security risks. One of the ...
51
votes
6answers
10k views
Should a bank/financial service use external URL shortener services?
Say there is a bank/financial service that wants to have hyperlinks on their secure website/domain (or even in emails they send out to customers). In some of these links there are some long/obscure ...
50
votes
1answer
9k views
In SQL injections why do they put “— -” at the end of the URL?
I understand when they put a + at the end, URL treats it like a space.
I want to know what -- - does. I do know what the "double dash" does. Including the double dash with a "space at the end". I ...
3
votes
1answer
265 views
How URL Encoding Works?
I am learning about web security but very confused about URL Encoding, it will be big help if anyone can help.
On PortSwigger, I learned that url
"http://127.0.0.1/admin"
can be used as
"http://127.0....
1
vote
1answer
106 views
How can i cause a redirect in browser?
I'm able to edit a parameter which is then reflected inside a link. I'd like to know how and if it's possible to cause a redirect. In shorts when i edit the parameter example like this example=/test....
0
votes
1answer
1k views
Demonstrating reflected XSS with GET Parameter and URL encoding
A client is developing a website which is vulnerable to reflected XSS through a GET parameter:
https://example.com/vulnerable-url?")||true)alert("XSS");</script>
I would like to demonstrate ...
1
vote
2answers
60 views
Does HTTP protocol interpret contents of cookies and query strings in URL, whereas it doesn't interpret message bodies?
HTTP knows to look for user names and passwords in authorization
headers in HTTP requests. So this is at HTTP level.
Is it correct that putting user passwords into message bodies of
HTTP requests is ...
0
votes
1answer
91 views
does HTTP PUT data get encrypted over TLS (HTTPS)? [duplicate]
I am wondering if the "/todo1" part of the below URL
curl https://someserver:5000/todo1 -d "data=Remember the milk" -X PUT
Gets encrypted over TLS/HTTPS, or is the full URL that you're sending your ...
1
vote
2answers
302 views
Can random subdomain naming enhance security?
I have a bunch of services which I want to group under a subdomain. Somehow 2-factor authentication is not possible to identify the users of these services. I have a thought to have randomly named ...
0
votes
1answer
82 views
Injecting script from outside for local machine url request
I have setup a local apache server with php module.I deployed a dvwa in my localmachinne..I am learning about XSS(DOM) type of attack.I setup the low level security in dvwa.When i added <script>...
2
votes
2answers
1k views
SQL injection using URL query string (web application/php server)
Hacker is trying to attack the site by using the following SQL injection query to get the SQL version.
Using URL site. example:
www.abc.com/?queryParamString=(SELECT 9701 FROM(SELECT COUNT(*),...
2
votes
0answers
53 views
Passing 3rd Party Access Token in redirection URL of 3rd Party Website
I am integrating a website with 3rd party API. The 3rd party site allows me to generate Access Token by using Client Key/Client Secret.
In one of the pages, I need to redirect to 3rd party site 's ...
0
votes
0answers
61 views
Is using “Signature Versioning” in Amazon S3 a secure way of selling ebooks?
I own an ecommerce platform that sells large (500 megabyte+) ebooks. To reduce server costs I am looking at hosting the ebooks on S3 and using Sendowl/ FetchApp to create the links to the downloads.
...
-2
votes
3answers
747 views
Can a URL contain executable JavaScript?
I am learning about "Session fixation" and have read the corresponding OWASP page.
In their Example 2 in the above page, they describe an attack via JavaScript, that is embedded in the URL like:
...
0
votes
2answers
468 views
one-time link on 1ty.me
1ty.me is a website that allows you to send secret messages (password, nuclear code, etc.) to someone with a one-time link. So when someone receives the link and clicks on it, the secret message is ...
0
votes
1answer
128 views
Phishing urls from shnpoc.net/McAfee?
I was looking into my websites traffic and found few entries from a subdomain for shnpoc.net domain. And when I looked into it, it was transparent proxying my website.
On checking further, I found ...
1
vote
0answers
126 views
Blocking URL brute-forcing on my server
Every day my server receives many GET requests in search of security holes. In other words, they are trying a list of words in search of a hole.
for example:
http://myapp.com/phpmyadmin
http://...
1
vote
1answer
116 views
Why modern php web application requires to specify the application's url?
Pieces of web applications such as WordPress or moodle require to specify the URL that the user will provide in order to visit the site. For example, in moodle has the $CFG->wwwroot config ...
0
votes
0answers
54 views
Trace the orgins of a DNS request [duplicate]
I installed a DNS server on a Raspberry PI to monitor DNS requests. One request that is curious is "fscta65w.com." It keeps showing up in the querlog from a macbookPro but I can't seem to find out the ...
1
vote
1answer
194 views
How to protect against injection into a 3rd party REST API?
I have a 3rd party API that I need to connect to and they allow queries that can be formed by changing url parameters.
E.g. /data?startDate=2019-01-01 or /data?name='John Doe'
It is easy to form ...
0
votes
1answer
100 views
What type of vulnerabilty is this?
I'm testing a website:
https://this-site.com/path/to/dirs
but what i've found is if I do the following below the site will load 4 pages in a infinite loop
https://this-site.com/path/to/dirs/.../.
...
3
votes
0answers
55 views
What does IIS query string validation protect from?
Recently we had a failure in one of our systems because IIS rejects query strings with (URL encoded) parameter values containing the sequence &#. It doesn't reject & #.
We've got tired of ...
2
votes
1answer
205 views
Replace PATH space with random string
I came across
http://test.co.uk/img/rOTJwSOqWzHaDsEUcHhI.
If we take a look at it the directory space is protected against bruteforcing of the whole directory to explore private images.
I don't know ...
