Questions tagged [url]
The url tag has no usage guidance.
1
vote
1answer
44 views
IP-whitelisting for DB access, does solution fit best practices?
All the data we have on our customers sits in our data-lake, which is hosted by one of our suppliers. Currently the security is such that a limited number of users has (limited) access to the database ...
0
votes
1answer
23 views
How can AWS API Gateway be used to rapidly rotate credentials in this fashion?
Reading through this article, I hit a little wall of understanding. The author states:
This is because my laptop doesn’t have the secret weapon. Once you get
this up and running on an EC2 ...
-2
votes
0answers
43 views
Unvalidated open redirect in path of URL
Is the following redirect mechanism exploitable? Meaning redirecting to another domain.
This: https://www.example.com/?return=/info.php
Redirects to: https://www.example.com/info.php
...
0
votes
1answer
51 views
Unknown URL parameters in google query
I received an email which is classified as "potentially malicious" by my email program (Thunderbird), where links are actually a google URL query with extra parameters:
For example, the displayed ...
1
vote
1answer
167 views
I'm getting a suspicious link that starts with account.youtube.com, can someone explain what this link does?
A lot of bots are sending this link to me on twitter, and obviously it must be something malicious. Can someone explain in a detailed manner that what does this link do and what is the vulnerability ...
3
votes
1answer
210 views
What is httpvh:// and is it the result of something malicious?
I was working on a client's old website and I noticed that some of their YouTube links were broken and looked like this:
httpvh://www.youtube.com/watch?v=jNQXAC9IVRw
At first I assumed it was some ...
0
votes
1answer
67 views
URL Filtering - What is the reason for blocking short url
By default many URL Filtering products will block the navigation of short URLs (e.g. the URL used by Twitter to link external pages).
What is the reason behind this block? Why I should prevent the ...
0
votes
2answers
93 views
Check for vulnerabilities on website having an error with realpath PHP
I found a website with a download.php file which can get different values in the url parameter (e.g. www.example.com/download.php?url=value). When I give ../../ as a value for the url it throws me the ...
-1
votes
1answer
57 views
Unable to utilise curl commands on website [closed]
There is a free online SMS service called globfone which allows you to send free text messages via their website. However, I'm looking to integrate this functionality into a script through curl. But ...
89
votes
8answers
15k views
Can secret GET requests be brute forced? [duplicate]
Say, I have on my server a page or folder which I want to be secret.
example.com/fdsafdsafdsfdsfdsafdrewrew.html
or
example.com/fdsafdsafdsfdsfdsafdrewrewaa34532543432/admin/index.html
If the ...
0
votes
2answers
390 views
SQL Injection with an uninjectable URL
I was recently given a subdomain to try and exploit with SQLi: gov.ns.agency. Unlike what I would see in most tutorials, I can't really inject parameters into the URL like I would see everywhere else.
...
3
votes
2answers
89 views
Where do products like BlueCoat and ForcePoint get there URL categorizations from?
I recently had an issue where I released software which made use of a new URL and several of my customer sites complained that the software wasn't working within their wifi network. It turned out ...
0
votes
1answer
221 views
Potentially dangerous request loads the page
I hosted an application in ASP.NET 4.0 webforms.
When I am browsing hostname/DressDetail.aspx?<script>alert(313)</script>&category=1&code=76 it is showing an error message like:
...
-1
votes
3answers
89 views
Username appearing in URL when changing password [closed]
Use case:
User logs into the site.
User goes to the "change password" page
On the "change password" page, I noticed that the username is being displayed in the URL:
https://example.com/cp.aspx?un=...
27
votes
3answers
5k views
Generating one time URLs which can be revoked
I have a requirement to generate a one time use URL which should have the following features:
As the URL query parameters may contain sensitive information, it should be encrypted (on top of https ...
15
votes
3answers
2k views
How to defend against homograph attacks?
Referring to this Wikipedia example of an homograph attack, the URL of Wikipedia had the Latin characters A and E replaced with a similar Cyrillic copy (wikipediа.org). These characters look so ...
1
vote
1answer
358 views
A potentially dangerous Request.Path value was detected from the client (&)
I was browsing the web and typed in a URL to visit, when I received the following response:
A potentially dangerous Request.Path value was detected from the client (&)
I did some research on ...
2
votes
1answer
251 views
Path traversal using hash extension attack
I'm trying to write a PoC for path traversal using hash extension attack on a PHP site.
My obstacle is in specifying an acceptable string. The vulnerability is in in the URL:
http://127.0.0.1/...
2
votes
1answer
40 views
How to secure a web service that allows custom user defined paths?
I'm working on a website that will rebuild data as an RSS feed based on a custom path.
For example: You have a video on youtube that you want an rss feed of comments, you can add -rss to the url (...
2
votes
1answer
524 views
Exploit LFI bug when a “.inc.php” is appended to the file name?
I'm trying to exploit a LFI bug. My link looks like this:
http://example.com/challenge/mypage.php?page=test
When I put /etc/passwd instead of test it shows me:
Warning: include() [function....
-1
votes
1answer
59 views
Passing a secret in url: as a part of the url or query string? [duplicate]
If I need to make get request to an html page and thus pass a secret via the url using https, is it true that I'd need to pass it in a query string versus a part of a path url?
my_domain.com/some_url/...
-5
votes
2answers
460 views
how can I access a ec2-xx-xx-xx-xx.us-west-2.compute.amazonaws.com ? this link won't open in my browser: [closed]
how can I access a us-west-2.compute.amazonaws.com ? this link won't open in my browser:
This page isn’t working didn’t send any data. ERR_EMPTY_RESPONSE
i'm not familiar with it, it starts with ...
2
votes
3answers
105 views
What are some potential attacks that could be done to a website that doesn't manage url-encoding properly?
A month or so ago I was in the middle of one of my "Distributed Applications" classes and the professor was explaining us how to """properly""" authenticate users in a server.
To demonstrate how to ...
0
votes
1answer
49 views
Odd searches returned at the end of homepage url; possible to exploit?
I'm penetration testing a website right now (they have a policy and a system for it), and I noticed that the search feature filters brackets.
After some messing around, I also noticed if you search ...
0
votes
4answers
2k views
Is it possible to sniff HTTPS URLs? [duplicate]
From many posts, I know that almost everything in HTTPS or SSL connections is encrypted. Still, I am wondering, if it is possible to get the URLs out of such a connection if the computer that opens ...
0
votes
0answers
26 views
Is it safe to host files in the object storage like S3 relying only on URL complexity? [duplicate]
I have noticed this situation with Trello and Google Photos.
In Trello file attachments are stored with AWS S3. Of course there is authentication & authorization gate to insure legitimate access ...
2
votes
1answer
8k views
SQL injection: how to find urls to attack to [closed]
The last days I've been reading about SQL injection and most of the url examples I see are like the following:
get_int_filtered.php?id=1
get_int_groupby.php?id=1
get_int_having.php?id=1
get_int_img....
0
votes
1answer
204 views
Phishing domain converting text due to special character?
Warning: The following links are phishing links, please do not sign in to them.
Today, a friend of mine came across the link hxxp://steạmcommunlty(dot)com/tradeoffer/new/. It's a phishing link, but I ...
3
votes
1answer
316 views
Exploitable URLs list
I have a web application which has recently been deployed to AWS.
In the last days, i got random requests to admin urls, like /admin.php, wp-admin.php etc. (obvious they are trying to find ...
0
votes
1answer
643 views
UUID in URL - how safe from accidental discovery is my proposed solution?
Here is what I want to do:
We create reports for customers, normally we send them as pdf to our customer who then shares them with colleagues across his company.
We want to switch now to digital ...
0
votes
1answer
89 views
What was the purpose of this URL encoded php request against my webserver? [duplicate]
I saw this entry in my webserver log recently
179.x.x.x - - [19/Oct/2017:01:40:30 +1300] "POST //%63%67%69%2D%62%69%6E/%70%68%70?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%...
1
vote
2answers
78 views
How (un)safe is it to protect an admin page with a simple query-string password? [duplicate]
I have a very simple admin web page that simply displays feedback messages left by users of my mobile app. The messages are sent from the app to a web server, and to view the messages one needs to ...
0
votes
1answer
109 views
Blackbox URL matching mechanism bypass for an open redirect
I'm currently testing a web application, which appears to have an open redirect vulnerability, since they receive a parameter redirect_url via GET. The application redirects the user to this URL later ...
1
vote
1answer
54 views
Website's url parameter gets returned onto page- can that be exploited?
I'm currently trying to find a vulnerability in a website (yes, I have permission). I found a url with a parameter that, when I change the text in it, that text is set as the name for the background ...
0
votes
1answer
52 views
In what ways can the URL be analyzed to decide whether a page is Phishing or not?
In what ways can a URL be analyzed to check whether its a Phishing page or not. Such as using target site's name somewhere in the URL, URL obfuscation, misspellings, etc. Its not possible every time ...
2
votes
2answers
193 views
why is it insecure to use userdata in url parameter names?
On the OWASP site on XSS it says that it is safe to put userdata in GET parameter values when encoded.
However, userdata should not be used anywhere else, so not in the scheme, the domain or ...
2
votes
1answer
97 views
URL query string guessing [closed]
I have recently identified a controller that handles query string parameters that are not obvious, by simply guessing query string parameters. E.g.
http://domain.com/controller.php?guessed_param=18
...
0
votes
2answers
98 views
Activating a user on a website — why include anything other than an activation code?
Quite often in order to active my account on a website I'll receive an email with this:
https://web_site.com/access?uid=1234&secret=456789&login=0123456789&mid=aabbcccdd
Why user id, ...
1
vote
1answer
2k views
Credentials in URL for Python “Requests” library [closed]
Will using the following code result in credentials being passed in the URL?
I know it is a GET method, but how does the python requests library process this?
Does it attach it to the URL or attach it ...
4
votes
1answer
1k views
Colons in URLs: Safe?
A friend asked me if it is relatively safe to click on the following link:
https://disq.us/url?url=https%3A%2F%2Farstechnica.co.uk%2Finformation-technology%2F2017%2F01%2Fantivirus-is-bad%2F%3Av0Er-...
0
votes
1answer
95 views
Unknown Requests on URL Web Filter Proxy
While trying to work on incident investigation, I am seeing continuous https requests from website
cdn.syndication.twimg.com:443/widgets/timelines/paged/
callback=__twttr.callbacks.tl
domain=www....
1
vote
1answer
72 views
set newline or slash through URL
There is an option to set date range through URL address bar like this
domain.tld/process/date_range:2017-04-13%7C2017-05-02
GET parameter is parsed in PHP like this
...
<?php if(isset($...
3
votes
4answers
208 views
Is there any risk involved allowing users to create their own URL's
I am about to launch a eCommerce platform where users have their own shop URL based on the username IE my username on stack is NoobSkie so I would access my shop at
www.example.com/noobskie/shop
Is ...
0
votes
1answer
164 views
Why are .URL and .WSH files considered dangerous?
Why are windows files with the extension ".url" and ".wsh" considered dangerous (e.g. blocked by many mail filters)? The way I see it:
.URL: you can link to a malicious website which serves an ...
3
votes
3answers
533 views
URL escape before inserting user data into HTML URL parameter values?
Suggestion from OWASP:
RULE #5 - URL Escape Before Inserting Untrusted Data into HTML URL Parameter Values
Rule #5 is for when you want to put untrusted data into HTTP GET parameter value.
&...
1
vote
1answer
1k views
What is client-channel.google?
I am newbie in penetration testing. When I was using burp-suite, intercepting a dummy web-application when I found some strange URLs.
7.client-channel.google
10.client-channel.google...
etc
...
4
votes
1answer
673 views
Append query string parameters to form.action or a.href using Javascript?
I have an HTML page which is accepting any number of query string parameters, which I need to pass on to the next page the user visits by clicking links on my page. Basically, if the user comes to
...
0
votes
2answers
564 views
Firewall is blocking invalid URLs, what is the danger?
My Fortinet firewall seems to be blocking invalid URLs (for example, URLs that it considers invalid, which means that underscores are not accepted, even though some sites use them). This causes some ...
2
votes
4answers
218 views
What is the proper way to escape bad data from link in javascript against xss
What is the right way to escape bad data the var "$actuallinkk" inside this java script
<a href="javascript:reportUser(\''.$actuallinkk.'&act=inviteadmin\')">Invite Consultant to this ...
0
votes
1answer
539 views
Which URL schemes are dangerous (XSS exploitable)?
I know that a blacklist approach to URL filtering isn't the most secure, but let's say that in addition to this filtering we're also rewriting all untrusted links to go through a redirect page that ...
