Questions tagged [url]
The url tag has no usage guidance.
230
questions
1
vote
1
answer
141
views
Website's url parameter gets returned onto page- can that be exploited?
I'm currently trying to find a vulnerability in a website (yes, I have permission). I found a url with a parameter that, when I change the text in it, that text is set as the name for the background ...
- 481
0
votes
1
answer
104
views
In what ways can the URL be analyzed to decide whether a page is Phishing or not?
In what ways can a URL be analyzed to check whether its a Phishing page or not. Such as using target site's name somewhere in the URL, URL obfuscation, misspellings, etc. Its not possible every time ...
- 351
2
votes
2
answers
510
views
why is it insecure to use userdata in url parameter names?
On the OWASP site on XSS it says that it is safe to put userdata in GET parameter values when encoded.
However, userdata should not be used anywhere else, so not in the scheme, the domain or ...
- 23
2
votes
1
answer
806
views
URL query string guessing [closed]
I have recently identified a controller that handles query string parameters that are not obvious, by simply guessing query string parameters. E.g.
http://domain.com/controller.php?guessed_param=18
...
- 59
0
votes
2
answers
174
views
Activating a user on a website -- why include anything other than an activation code?
Quite often in order to active my account on a website I'll receive an email with this:
https://web_site.com/access?uid=1234&secret=456789&login=0123456789&mid=aabbcccdd
Why user id, ...
- 2,207
1
vote
1
answer
6k
views
Credentials in URL for Python "Requests" library [closed]
Will using the following code result in credentials being passed in the URL?
I know it is a GET method, but how does the python requests library process this?
Does it attach it to the URL or attach it ...
- 137
5
votes
1
answer
9k
views
Colons in URLs: Safe?
A friend asked me if it is relatively safe to click on the following link:
https://disq.us/url?url=https%3A%2F%2Farstechnica.co.uk%2Finformation-technology%2F2017%2F01%2Fantivirus-is-bad%2F%3Av0Er-...
0
votes
1
answer
202
views
Unknown Requests on URL Web Filter Proxy
While trying to work on incident investigation, I am seeing continuous https requests from website
cdn.syndication.twimg.com:443/widgets/timelines/paged/
callback=__twttr.callbacks.tl
domain=www....
- 5
1
vote
1
answer
235
views
set newline or slash through URL
There is an option to set date range through URL address bar like this
domain.tld/process/date_range:2017-04-13%7C2017-05-02
GET parameter is parsed in PHP like this
...
<?php if(isset($...
- 11
2
votes
4
answers
261
views
Is there any risk involved allowing users to create their own URL's
I am about to launch a eCommerce platform where users have their own shop URL based on the username IE my username on stack is NoobSkie so I would access my shop at
www.example.com/noobskie/shop
Is ...
- 145
0
votes
2
answers
934
views
Why are .URL and .WSH files considered dangerous?
Why are windows files with the extension ".url" and ".wsh" considered dangerous (e.g. blocked by many mail filters)? The way I see it:
.URL: you can link to a malicious website which serves an ...
- 127
3
votes
3
answers
2k
views
URL escape before inserting user data into HTML URL parameter values?
Suggestion from OWASP Cross Site Scripting Prevention Cheat Sheet:
RULE #5 - URL Escape Before Inserting Untrusted Data into HTML URL Parameter Values
Rule #5 is for when you want to put untrusted ...
- 561
3
votes
1
answer
12k
views
What is client-channel.google? [closed]
I am newbie in penetration testing. When I was using burp-suite, intercepting a dummy web-application when I found some strange URLs.
7.client-channel.google
10.client-channel.google...
etc
I ...
- 581
4
votes
1
answer
3k
views
Append query string parameters to form.action or a.href using Javascript?
I have an HTML page which is accepting any number of query string parameters, which I need to pass on to the next page the user visits by clicking links on my page. Basically, if the user comes to
...
- 43
0
votes
2
answers
2k
views
Firewall is blocking invalid URLs, what is the danger?
My Fortinet firewall seems to be blocking invalid URLs (for example, URLs that it considers invalid, which means that underscores are not accepted, even though some sites use them). This causes some ...
- 103
2
votes
3
answers
987
views
What is the proper way to escape bad data from link in javascript against xss
What is the right way to escape bad data the var "$actuallinkk" inside this java script
<a href="javascript:reportUser(\''.$actuallinkk.'&act=inviteadmin\')">Invite Consultant to this ...
0
votes
1
answer
2k
views
Which URL schemes are dangerous (XSS exploitable)?
I know that a blacklist approach to URL filtering isn't the most secure, but let's say that in addition to this filtering we're also rewriting all untrusted links to go through a redirect page that ...
- 101
131
votes
10
answers
16k
views
Should I contact the manufacturer if their product allows access to other users' location information?
I recently purchased a satellite communicator that allows me to send a map of my location to friends and family while I'm hiking in the wilderness.
While testing out my product, I noticed that the ...
- 1,143
1
vote
2
answers
19k
views
Cannot figure out how to bypass this function for lfi
I'm currently doing some practice about security and facing challenges provided in a website.
One of them talks about LFI and I did figure out what to do, but I have no idea how to do this, so let's ...
- 111
2
votes
2
answers
164
views
How to conclude from a target IP to associated URL(s)?
Given a target IP or target IP(s). Is there any reasonable way to conclude from the IP to hosted URL(s).
I can scan the IP(s) with nmap and possibly conclude on which ports a webserver is running, ...
- 1,019
3
votes
1
answer
2k
views
Can the creator of Bitly links be determined from the link?
Let's say that an attacker is using Bitly's web API to generate large numbers of bitly links.
If we have the bitly link (e.g. http://bit.ly/1gX2dD0), is there any way to trace that bitly link back to ...
- 131
0
votes
4
answers
913
views
How do URL shortening services like bitly prevent ddos attacks? [closed]
i am working on a project that needs to shorten URLs to of about ~25 chars of length. I can create cryptic ids which map to full length URL and persist it in a DB. My only worry is how can i prevent ...
- 143
1
vote
1
answer
331
views
Securing a Web API in MVC
I've got a simple ASP MVC 6 WebAPI I'm currently working on in which registered users can call request data using a sample of the URL below:
http://localhost:7988/api/b8pE5Qodiw/elections/Prop1/Prop2/...
- 113
3
votes
1
answer
749
views
What, if any, URL protocols should I whitelist or blacklist when spawning the user's browser?
I'm writing an app using Electron but I'd assume this would be a problem for any software that lets you open links in the user's default browser through the OS.
Let's say I have app that reads ...
- 458
14
votes
1
answer
6k
views
Is a plain password in the URL a potential security threat? [duplicate]
I'm in no way a security expert, in fact I'm just your average Joe with a question.
I was on my car insurance website, I registered and as I logged in I saw my password, not encrypted, in plain ...
- 143
6
votes
1
answer
290
views
How does this possibly malicious phishing email link work?
I got a phishing email from a supposed realtor that wanted me to click on the following link
http://wonderit.net/f%23$%25%5e%29%28*%5e%25$%25%5eamg*&%5e%25$%23$%25%5e/
which I decoded as:
http:/...
- 163
-1
votes
1
answer
188
views
Why do big companies use scammy looking URL's? [closed]
Why do big companies like microsoft use URL's like buy.live.com, that don't look like they belong to microsoft at all?
Is there a technical reason not to use something like buy.live.microsoft.com ?
...
- 1,254
0
votes
1
answer
644
views
Restrict access to public URL many times
I have such situation. Imagine there is a public service (URL). What we don't want, is for someone, to be able to access this URL many times in short period of time, because they will be able to block ...
-4
votes
1
answer
288
views
Does using a long, un-guessable link protect a page? [closed]
If I use a link like this:
www.example.com/vjbvhagwi74g3577384hqujvbgp39843q9-8q24380gfbqp29-q2--2=08h49h24tt982uh3...
Will the infomation be safe?
1
vote
2
answers
1k
views
URL rewriting of session cookies
I stumbled over this in the ASVS 3.0.1 (V3.6). I wonder what this is, I couldn't find any meaningful explanation.
- 694
9
votes
1
answer
889
views
Why is there "t=[your device]" in duckduckgo query URL?
I was just searching something on my raspberrypi via duckduckgo and realized that there is q=[my query]&t=raspberrypi&[rest of the URL] in the URL bar.
When i did the same query on my PC, ...
- 782
2
votes
2
answers
3k
views
Modify Javascript Variable with URL Exploit
Is it possible to set a javascript variable through the URL?
Here's an example of the code I'm trying to modify:
<script type="text/javascript">
var x = 0;
</script>
Is there a way to ...
- 123
2
votes
3
answers
2k
views
URL vulnerabilities can be avoided if the post method is used?
If I have a form that accepts inputs through the GET method, and can be generated vulnerabilities as XSS.
Using the POST method is possible to prevent vulnerabilities that can be generated through ...
- 165
4
votes
2
answers
2k
views
Why is it dangerous to allow all characters in a URL?
Reviewing the configuration of CodeIgniter, I saw the following line:
$config['permitted_uri_chars'] = 'a-z 0-9~%.:_\-';
And the documentation it says:
/*
|------------------------------------------...
- 165
4
votes
2
answers
3k
views
Are hiding and obfuscating the URL parameter keys a protection against tampering?
Does the use of mod_rewrite make PHP array injection (web parameter key tampering) impossible when the keys are unknown (and hard to guess)?
Let's say we have the following URL:
https://example.com/...
- 6,337
0
votes
1
answer
193
views
Is it a good idea to preventive use a robots.txt that disallows all search engines to index query strings in order to slow down reconnaissance?
I know that robots.txt is not a security feature. But, indexed and cached information by search engines might be incredibly helpful in the reconnaissance phase of a penetration test and potentially ...
- 6,337
6
votes
1
answer
1k
views
Are these encrypted URL values safe or could they be guessed?
One of our suppliers had a weakness on the secure section of his webpage. By changing ID's in the URL, we could see data that did not belong to us.
For example:
https://supplier.org/showItem.do?...
- 3,938
0
votes
1
answer
106
views
Anti CSRF tokens with a black box
Consider an app you develop that uses something like the OWASP CSRFGuard library. What can be done to protect against XSS if the app calls a third party black box app that has no way to store and ...
-4
votes
3
answers
1k
views
How to pass website firewall, in PHP? [closed]
Recently, I have posted a question, (https://stackoverflow.com/questions/37494896/how-to-save-file-from-url-to-web-server-by-php). And, there is an answer in question.
In this answer, he said: "So ...
- 1
9
votes
1
answer
1k
views
How can Google search change the location in a URL tooltip?
When hovering over a website link in Google search the tooltip says the link of the website (stackoverflow.com). But when I click it it goes to some Google page and then StackOverflow. But now if I go ...
- 477
2
votes
1
answer
124
views
Are there any standard practices for protecting against malicious links being entered in a public form?
A website I'm working on needs to have a form for any visitor to submit a request for information about a service. The user will not need to create an account, and contact details are just part of the ...
- 823
0
votes
1
answer
84
views
On Mozilla's Add-ons site (AMO) what is happening with external links?
On Mozilla's Add-ons site (known as AMO), all external links are directed through:
https://outgoing.mozilla.org/v1/[UUID]/[destination URL]
As a random example, see the link in the Description ...
3
votes
1
answer
14k
views
Google Drive photo security and publicly visible lh*.googleusercontent.com
I thought Google Drive was more secure than this.
If I upload a photo to Google Drive, I don't care that it's entrusted to them and I also assume someone working there can look at it. No big deal. ...
- 133
5
votes
1
answer
2k
views
Security requirements for one time access code/token in the url
I have an application that will send an SMS reminder for user containing a URL to log on. I would like to avoid user typing in username/password and log him in directly. For that I plan to use an ...
- 2,257
2
votes
2
answers
3k
views
Is it bad if session key is passed in plain text in URL?
In a class we were told that it's dangerous to put the session key in the URL because it could be cached, either by the browser or a proxy etc. Is this correct? Even if it was cached shouldn't the ...
- 10.1k
130
votes
4
answers
28k
views
Is it safe to include an API key in a request's URL?
Lately I've seen plenty of APIs designed like this:
curl "https://api.somewebsite.com/v1/something&key=YOUR-API-KEY"
Isn't it elementary that passing an API key in a query string as a part of ...
- 2,207
22
votes
2
answers
10k
views
Can javascript execution from address bar cause any harm to client's machine?
Given the fact that modern browsers these days prohibit JavaScript from having access to any resources on the client's machine, does JavaScript execution from the address bar pose any threat at all to ...
- 853
36
votes
3
answers
11k
views
Is HTTPS URL in plain text at first connection? [duplicate]
Let’s say I have never connected to the site example.com.
If this site is https and I write https://example.com/supersecretpage will the URL be sent in clear text since it's the first time I connect ...
- 385
5
votes
2
answers
933
views
Is URL redirection in PHP safe if I use ../../ as a prefix?
I am developing a PHP web app and I'm in the process of implementing a redirection functionality.
I know that redirection can be dangerous when it can be set on the client side and I use ../../ as a ...
- 53
5
votes
3
answers
4k
views
Is random URL token secure enough for file attachments and other user content? [duplicate]
Lets say we have a hypothetical system where there are various files are added by users and are sensitive, e.g. lets say an attachment to a private message. It's not that easy to verify access rights ...
- 2,257