Questions tagged [web]
The web tag has no usage guidance.
181
questions
5
votes
1answer
187 views
Web Assembly Security
I'm excited about the prospects of web-assembly for the future, but I'm curious if this will have the same security ramifications of Java Applets.
What are some of the reasons why web assembly is ...
0
votes
0answers
45 views
Is it possible to know the keep-alive time supported by a web server?
I'm testing a web server that may be vulnerable to denial of service because of the time server keeps alive conections of the clients, I found that in a qualys report I launched against the webapp. I ...
1
vote
0answers
32 views
Security implications of not verifying domain ownership on embeddable website tools like disqus [closed]
Context: Disqus and similar tools allow content creators to have an embedded "chat box" so that site visitors can comment on your content.
I noticed recently that when I sign up I can claim ...
2
votes
1answer
47 views
CSRF payload delivery
If an attacker successfully delivers a CSRF payload by any means, what response can he can see once a victim clicks the link?
0
votes
0answers
47 views
Reaching directly the origin server (through http) should be considered a vulnerability if the webapp use cloudfront?
SCENARIO:
webapp X use clodufront distributions to serve its content.
It's possible to contact directly the origin server and get the content with the following steps:
modify /etc/hosts to add <...
1
vote
0answers
49 views
How to determine if a webshop is scam? [closed]
Nowadays people prefer to do their shopping online rather than using the real shop, especially because of the COVID-19 restrictions. But in the same context, attackers (scammers) are trying to gain ...
1
vote
1answer
57 views
Evaluate this approach: set production DNS to point to 127.0.0.1
I am evaluating a vendor whose technology takes the following approach:
My website asks user to install vendor's executable (EXE) on their machine. This EXE does operations that cannot be done in-...
1
vote
0answers
44 views
Best practices for handling links in discussion posts
Let's say I have a site like stack overflow. People post comments with - possibly - links to external sites. Is there some "standard" set of rules to make it reasonably safe for users and ...
0
votes
1answer
53 views
How can you find the PHP version a website is using using LFI?
If a website is vulnerable to Local File Inclusion (LFI), how can you use it to find out the PHP version? Is there any file which says the version of PHP being used. I'm trying to do a PHP sessions ...
2
votes
2answers
114 views
Is it necessary to force a newly registered user to login?
In a web application, is there a security advantage to forcing a newly registered user to manually log into their account, or is it safe to automatically log in a new registration? Assume that the ...
1
vote
0answers
53 views
How do hackers gain access using malicious websites? [duplicate]
I read somewhere that entering a malicious website can infect your machine without you noticing it at all. When someone wants to infect other's computers he has to pass two challenges (as I see this).
...
1
vote
0answers
48 views
What are 7-character giberrish words regularly submitted to website forms? [closed]
I administer multiple websites operating in very different areas and they all consistently and regularly get submitted spam entries like below:
Bkihvpv
Ykuufwk
some@email_address.com
:
or
Aqmkylu
...
2
votes
1answer
66 views
Content-Secure-Policy headers
I am performing a security assessment on a web application and I found it doesn't have the Content-Security-Policy, but instead it has Content-Secure-Policy. It is literally the first time I'm seeing ...
0
votes
0answers
52 views
Remotely crashing a PC by only visiting a website? Is this an at least 6 year old WebGL bug?
http://hunger.hu/webgl.html
WARNING: only visit this website, it you don't mind crashing your PC!
so how is this possible? the website dates back to 2014! It is 2020 and by only visiting a website ...
0
votes
1answer
81 views
How to securely transfer cookies between two domains?
Let's say you have a website https://example.org which is being decommissioned and redirected to https://example.net.
Your users have a cookie on https://example.org which contains some authentication ...
1
vote
0answers
32 views
Security Concerns with HTTP/3 / QUIC-based protocols [duplicate]
I've been seeing a large number of companies, including Cloudflare who just sent out a notice to their customers about enabling HTTP/3 via QUIC recently, touting HTTP/3 based on QUIC as 'much better' ...
0
votes
1answer
54 views
Redirection - Different Website from Different Computer
There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
0
votes
1answer
80 views
Making S3 objects viewable only for logged in users
As a service provider, I allow logged in users to upload documents to a web server, and upload it to S3. The logged in user should subsequently be able to view his own documents, and I want to serve ...
1
vote
0answers
104 views
What is meaning of setting port number to NULL in document.domain call?
Here (https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy) it is mentioned
The port number is checked separately by the browser. Any call to document.domain, including document....
0
votes
1answer
50 views
Is it good idea to re-authenticate a user to access sensitive actions and data?
In a web application there are several pages in which you have sensitvie data and actions like access controls or user management page. Is it a good idea to re-authenticate user to access those pages? ...
3
votes
3answers
374 views
How to make sure that no one is watching you through webcam?
I have heard that intelligence agencies and hackers can illicitly gain access to a computer's webcam and microphone and keep a close eye on people using suspicious programs or malware.
Is there any ...
9
votes
1answer
590 views
Does HTTP/2 prevent security vulnerabilites like CRLF injection?
Which vulnerabilites does HTTP/2 prevent?
More specifically:
Does it prevent HTTP request smuggling?
Does it prevent HTTP response splitting / CRLF injection?
0
votes
2answers
91 views
Can a Slow Post HTTP attack be done from a single client?
Can a Slow Post HTTP attack be done from a single client?
The following source cites this line:
https://medium.com/fantageek/understanding-socket-and-port-in-tcp-2213dc2e9b0c
Ports are 16-bit numbers,...
2
votes
2answers
131 views
Website attack: What is the attacker's goal?
A bot network(?) has been after my website for quite a while now. Here is a breakdown of what they do:
They register several accounts using random characters for building a first and last name which ...
1
vote
1answer
235 views
Can my company track my web history when Opera VPN is active?
Today I brought my personal laptop to the office. My laptop connects to the personnel wi-fi automatically (not actual intranet). To mention, my work ID and password are needed to connect this network. ...
1
vote
2answers
121 views
Public-key-based website login
I'm looking to implement a public-key based login / authentication for a website.
This will not be used for general users – it will be used by both automated scripts and for admin logins.
Before ...
4
votes
1answer
1k views
Can Javascript overwrite a HTTPOnly cookie?
Can Javascript overwrite or delete a HTTPOnly cookie?
In more detail: Suppose the user's browser has a cookie for example.com with the HTTPOnly flag set, say session=552..e0. Suppose the user visits ...
0
votes
1answer
115 views
Is Using SSL secure enough to post request login credentials to my backend server?
I hope everyone is doing okay.
I've built a React.js website which is hosted in a server with SSL, but I'm not sure whether it's secure or not. That's why I decided to ask you for some advice/tips or ...
0
votes
0answers
736 views
Difference between gobuster and dirbuster in performance
The only difference I am aware, is of CLI vs GUI. But I am curious to know as to what is the difference in their performance and what are the additional features in one tool compared to another?
0
votes
1answer
54 views
How to find PHP filename and ID of the URL?
.htaccess is now a very common URL rewrite to make it SEO friendly and cover the database IDs.
What are the ways to explore php file on the server given to URL via .htaccess?
Example :
The URL is ...
0
votes
0answers
30 views
Burpsuite Crawling - Display Function Location on Result
Is there is any way for me to display Burpsuite crawling result as Function Location?
What i mean by function location is like for example:
URL: x.com/functions/showdata
Function Location: User > ...
0
votes
2answers
93 views
Simple and Universal way to password-protect existing webservices that are exposed to internet
There are many tools, devices and programs that by default run a http server and expose a user interface on port 80. Even my coffee machine has a web ui that it provides on port 80.
Now, it's easy to ...
1
vote
1answer
100 views
Can a file upload function be vulnerable without it the file name getting passed?
From googling, a lot of file upload vulnerabilities rely on injecting something into the filename and also rely on the picture being stored on the server, is it safe to just do a post request of the ...
2
votes
1answer
426 views
Which web vulnerabilities should I test for when pentesting a static site?
I have a static-page website that I need to pentest. What I mean by this is that the site does not have a database, and it has no area to submit user input except for to a third party payment service ...
0
votes
1answer
100 views
What Same Origin Policy related risks are there with static pages?
I am wondering what risks there are if you have static pages on the same host that don't trust each other.
A key concept of Javascript and web security is the Same Origin Policy (SOP), which is also ...
1
vote
2answers
97 views
VPN service - change of ip
Imagine I connect to example.com, change my IP address using my VPN service, and then remain on example.com in my browser. Meanwhile I open some other sites and eventually switch off my VPN service. ...
1
vote
0answers
153 views
Is it possible to bypass .htacess protection?
So, I was involving in one of projects where client site and admin panel/dashboard was hosted on different sites. Not like a lot of CRM`s do or 90% of common sites (just in /admin or other URL ...
1
vote
2answers
242 views
Can random subdomain naming enhance security?
I have a bunch of services which I want to group under a subdomain. Somehow 2-factor authentication is not possible to identify the users of these services. I have a thought to have randomly named ...
0
votes
2answers
468 views
Can my oppressive government trace my Twitter activity and detect me?
I want to be active on Twitter against our oppressive government. Can my government trace and detect me?
Twitter is banned here and we must use VPNs. I use Outline (Shadowsocks) mostly. Is there any ...
-3
votes
2answers
2k views
Can arch Linux be used for pentesting [closed]
I currently use very much Ubuntu and Kali from the Debian family for penetration testing (Network and Apps) and I want to know if anybody has tested arch Linux or other distros for penetration testing....
32
votes
3answers
7k views
How are short passwords not safe if you limit the number of attempts?
On all web services that require passwords, like gmail, you are asked to set a long password. Like 8 characters or more.
The reason being higher security.
But the same services limit the number of ...
0
votes
1answer
176 views
Why is the Web so complicated? [closed]
Hope it does not sound as a surprise to anyone that modern Web and its security, with the many layers and technologies, is pretty confusing and difficult to learn well. For someone with a good ...
0
votes
3answers
82 views
Is it safe to hash passwords on the users device?
I don't know much about hashing, but I noticed a (relatively reputable) site logging me into my account by sending the url parameter "hash=longStringIAssumeisTheHashOfMyPassword".
The point of ...
2
votes
1answer
113 views
Can someone perform DDoS on my VPS even if it is only accessible through SSH?
Can someone perform DDoS on my VPS even if I have not installed any webserver software like apache, nginx, etc.? Since I have not installed any webserver software, it's not really available to the ...
1
vote
0answers
112 views
Blocking URL brute-forcing on my server
Every day my server receives many GET requests in search of security holes. In other words, they are trying a list of words in search of a hole.
for example:
http://myapp.com/phpmyadmin
http://...
1
vote
1answer
171 views
Do you really need an access token and refresh token?
When using a single page application, in what way is access token + refresh token more secure than a single token in a cookie with SameSite: strict.
Given the browser supports SameSite.
I completely ...
1
vote
2answers
1k views
Bypassing NET::ERR_CERT_DATE_INVALID
When I try to access the Openmailbox web site, Google Chrome returns a NET::ERR_CERT_DATE_INVALID error:
"openmailbox.org normally uses encryption to protect your information.
When Google Chrome ...
1
vote
0answers
145 views
Wordpress site request to /wp-includes/Text/Diff/ yields open directory listing
Someone requested my site's (Wordpress/Apache) 'includes' directory:
122.51.0.219 - - [03/Oct/2019:18:36:15] "GET /wp-includes/Text/Diff/ HTTP/1.1" 200 736 "-" "-"
Noticing the 200 response, I hit ...
2
votes
1answer
971 views
Is it possible to gain RCE from Arbitrary file write by an unprivileged user?
I am pentesting a PHP website running on Apache in a Ubuntu server.
I found a vulnerability that allows me to write files to the target system.
I know it's possible to write a php shell to the HTTP ...
1
vote
1answer
512 views
PCI Compliance 8.2.1, 8.2.3, 8.2.4 - Which user passwords is this talking about?
Say you have an e-commerce site that falls under the SAQ A-EP standard, due to extra content on the same page as the iframe that takes the credit card info.
This used to fall under the SAQ A ...
