Questions tagged [web]
The web tag has no usage guidance.
188
questions
0
votes
1answer
65 views
Google Chrome, the best bet for online privacy? [closed]
You may think I'm crazy, that's why I'm here to ask. I read this page which went over the privacy and security of many if not all browsers.
From his reporting, and my own logic, that the government ...
1
vote
0answers
77 views
API keys or Client Credentials flow? Good practice to control application access to a deployed web component
Company A developed a widget (Web Component) deployed on several clients/partners.
Only clients/partners must be authorized to use the widget.
No need to distinguish between each end users (clients' ...
2
votes
1answer
47 views
web app 3rd party JS dependency vulnerability management
As a security engineer, I wonder about the common approach for web app 3rd party JS dependency vulnerability management. We have a lot of apps depend on Jquery etc. In a regular vulnerability scan, ...
0
votes
1answer
50 views
Storing Client Data for next page?
I have a little project for authentication and I need to store an encryption key on website B which I get from the server on website A, but the server from website B should not be able to read it.
Is ...
0
votes
0answers
51 views
Can I skip “if” statement with chrome debugger or another javascript debugger?
I see this code in a bug bounty program
The code:
<!DOCTYPE html>
<html>
...
</html>
<script>
if(window.location.pathname === '/' || window.location.pathname.includes('.html')){...
0
votes
0answers
18 views
Will Internet provider know what sub-page I visited on a site? [duplicate]
Let's say in my address bar I see such link:
Privatebin URL/key interception?
Can somebody besides server and me know that I'm visiting not just security.stackexchangec.com but excactly ../questions/...
2
votes
2answers
102 views
How is a DNS wildcard a security issue for GitHub Pages?
GitHub Pages allows to set up a public page under <user>.github.io that can optionally be customized with a personal domain. In order to do so:
GitHub must be set up to recognize that an ...
2
votes
1answer
102 views
Wayback machine downloading a file called default.exe?
When I look up a site on wayback machine, I click through a couple of links on the site, and then instead of loading the page, it downloads a file called "default.exe".
Since I was expecting ...
5
votes
1answer
202 views
Web Assembly Security
I'm excited about the prospects of web-assembly for the future, but I'm curious if this will have the same security ramifications of Java Applets.
What are some of the reasons why web assembly is ...
0
votes
0answers
46 views
Is it possible to know the keep-alive time supported by a web server?
I'm testing a web server that may be vulnerable to denial of service because of the time server keeps alive conections of the clients, I found that in a qualys report I launched against the webapp. I ...
1
vote
0answers
32 views
Security implications of not verifying domain ownership on embeddable website tools like disqus [closed]
Context: Disqus and similar tools allow content creators to have an embedded "chat box" so that site visitors can comment on your content.
I noticed recently that when I sign up I can claim ...
2
votes
1answer
52 views
CSRF payload delivery
If an attacker successfully delivers a CSRF payload by any means, what response can he can see once a victim clicks the link?
0
votes
0answers
54 views
Reaching directly the origin server (through http) should be considered a vulnerability if the webapp use cloudfront?
SCENARIO:
webapp X use clodufront distributions to serve its content.
It's possible to contact directly the origin server and get the content with the following steps:
modify /etc/hosts to add <...
1
vote
0answers
52 views
How to determine if a webshop is scam? [closed]
Nowadays people prefer to do their shopping online rather than using the real shop, especially because of the COVID-19 restrictions. But in the same context, attackers (scammers) are trying to gain ...
1
vote
1answer
59 views
Evaluate this approach: set production DNS to point to 127.0.0.1
I am evaluating a vendor whose technology takes the following approach:
My website asks user to install vendor's executable (EXE) on their machine. This EXE does operations that cannot be done in-...
1
vote
0answers
44 views
Best practices for handling links in discussion posts
Let's say I have a site like stack overflow. People post comments with - possibly - links to external sites. Is there some "standard" set of rules to make it reasonably safe for users and ...
0
votes
1answer
74 views
How can you find the PHP version a website is using using LFI?
If a website is vulnerable to Local File Inclusion (LFI), how can you use it to find out the PHP version? Is there any file which says the version of PHP being used. I'm trying to do a PHP sessions ...
3
votes
2answers
132 views
Is it necessary to force a newly registered user to login?
In a web application, is there a security advantage to forcing a newly registered user to manually log into their account, or is it safe to automatically log in a new registration? Assume that the ...
1
vote
0answers
54 views
How do hackers gain access using malicious websites? [duplicate]
I read somewhere that entering a malicious website can infect your machine without you noticing it at all. When someone wants to infect other's computers he has to pass two challenges (as I see this).
...
1
vote
0answers
54 views
What are 7-character giberrish words regularly submitted to website forms? [closed]
I administer multiple websites operating in very different areas and they all consistently and regularly get submitted spam entries like below:
Bkihvpv
Ykuufwk
some@email_address.com
:
or
Aqmkylu
...
2
votes
1answer
85 views
Content-Secure-Policy headers
I am performing a security assessment on a web application and I found it doesn't have the Content-Security-Policy, but instead it has Content-Secure-Policy. It is literally the first time I'm seeing ...
0
votes
0answers
53 views
Remotely crashing a PC by only visiting a website? Is this an at least 6 year old WebGL bug?
http://hunger.hu/webgl.html
WARNING: only visit this website, it you don't mind crashing your PC!
so how is this possible? the website dates back to 2014! It is 2020 and by only visiting a website ...
0
votes
1answer
89 views
How to securely transfer cookies between two domains?
Let's say you have a website https://example.org which is being decommissioned and redirected to https://example.net.
Your users have a cookie on https://example.org which contains some authentication ...
1
vote
0answers
32 views
Security Concerns with HTTP/3 / QUIC-based protocols [duplicate]
I've been seeing a large number of companies, including Cloudflare who just sent out a notice to their customers about enabling HTTP/3 via QUIC recently, touting HTTP/3 based on QUIC as 'much better' ...
0
votes
1answer
69 views
Redirection - Different Website from Different Computer
There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
0
votes
1answer
128 views
Making S3 objects viewable only for logged in users
As a service provider, I allow logged in users to upload documents to a web server, and upload it to S3. The logged in user should subsequently be able to view his own documents, and I want to serve ...
1
vote
0answers
113 views
What is meaning of setting port number to NULL in document.domain call?
Here (https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy) it is mentioned
The port number is checked separately by the browser. Any call to document.domain, including document....
0
votes
1answer
52 views
Is it good idea to re-authenticate a user to access sensitive actions and data?
In a web application there are several pages in which you have sensitvie data and actions like access controls or user management page. Is it a good idea to re-authenticate user to access those pages? ...
3
votes
3answers
376 views
How to make sure that no one is watching you through webcam?
I have heard that intelligence agencies and hackers can illicitly gain access to a computer's webcam and microphone and keep a close eye on people using suspicious programs or malware.
Is there any ...
9
votes
1answer
643 views
Does HTTP/2 prevent security vulnerabilites like CRLF injection?
Which vulnerabilites does HTTP/2 prevent?
More specifically:
Does it prevent HTTP request smuggling?
Does it prevent HTTP response splitting / CRLF injection?
0
votes
2answers
106 views
Can a Slow Post HTTP attack be done from a single client?
Can a Slow Post HTTP attack be done from a single client?
The following source cites this line:
https://medium.com/fantageek/understanding-socket-and-port-in-tcp-2213dc2e9b0c
Ports are 16-bit numbers,...
2
votes
2answers
133 views
Website attack: What is the attacker's goal?
A bot network(?) has been after my website for quite a while now. Here is a breakdown of what they do:
They register several accounts using random characters for building a first and last name which ...
4
votes
1answer
405 views
Can my company track my web history when Opera VPN is active?
Today I brought my personal laptop to the office. My laptop connects to the personnel wi-fi automatically (not actual intranet). To mention, my work ID and password are needed to connect this network. ...
1
vote
2answers
129 views
Public-key-based website login
I'm looking to implement a public-key based login / authentication for a website.
This will not be used for general users – it will be used by both automated scripts and for admin logins.
Before ...
5
votes
1answer
1k views
Can Javascript overwrite a HTTPOnly cookie?
Can Javascript overwrite or delete a HTTPOnly cookie?
In more detail: Suppose the user's browser has a cookie for example.com with the HTTPOnly flag set, say session=552..e0. Suppose the user visits ...
0
votes
1answer
148 views
Is Using SSL secure enough to post request login credentials to my backend server?
I hope everyone is doing okay.
I've built a React.js website which is hosted in a server with SSL, but I'm not sure whether it's secure or not. That's why I decided to ask you for some advice/tips or ...
0
votes
0answers
1k views
Difference between gobuster and dirbuster in performance
The only difference I am aware, is of CLI vs GUI. But I am curious to know as to what is the difference in their performance and what are the additional features in one tool compared to another?
0
votes
1answer
140 views
How to find PHP filename and ID of the URL?
.htaccess is now a very common URL rewrite to make it SEO friendly and cover the database IDs.
What are the ways to explore php file on the server given to URL via .htaccess?
Example :
The URL is ...
0
votes
2answers
93 views
Simple and Universal way to password-protect existing webservices that are exposed to internet
There are many tools, devices and programs that by default run a http server and expose a user interface on port 80. Even my coffee machine has a web ui that it provides on port 80.
Now, it's easy to ...
1
vote
1answer
102 views
Can a file upload function be vulnerable without it the file name getting passed?
From googling, a lot of file upload vulnerabilities rely on injecting something into the filename and also rely on the picture being stored on the server, is it safe to just do a post request of the ...
2
votes
1answer
524 views
Which web vulnerabilities should I test for when pentesting a static site?
I have a static-page website that I need to pentest. What I mean by this is that the site does not have a database, and it has no area to submit user input except for to a third party payment service ...
0
votes
1answer
101 views
What Same Origin Policy related risks are there with static pages?
I am wondering what risks there are if you have static pages on the same host that don't trust each other.
A key concept of Javascript and web security is the Same Origin Policy (SOP), which is also ...
1
vote
2answers
100 views
VPN service - change of ip
Imagine I connect to example.com, change my IP address using my VPN service, and then remain on example.com in my browser. Meanwhile I open some other sites and eventually switch off my VPN service. ...
1
vote
0answers
242 views
Is it possible to bypass .htacess protection?
So, I was involving in one of projects where client site and admin panel/dashboard was hosted on different sites. Not like a lot of CRM`s do or 90% of common sites (just in /admin or other URL ...
1
vote
2answers
301 views
Can random subdomain naming enhance security?
I have a bunch of services which I want to group under a subdomain. Somehow 2-factor authentication is not possible to identify the users of these services. I have a thought to have randomly named ...
0
votes
2answers
625 views
Can my oppressive government trace my Twitter activity and detect me?
I want to be active on Twitter against our oppressive government. Can my government trace and detect me?
Twitter is banned here and we must use VPNs. I use Outline (Shadowsocks) mostly. Is there any ...
-3
votes
2answers
2k views
Can arch Linux be used for pentesting [closed]
I currently use very much Ubuntu and Kali from the Debian family for penetration testing (Network and Apps) and I want to know if anybody has tested arch Linux or other distros for penetration testing....
32
votes
3answers
7k views
How are short passwords not safe if you limit the number of attempts?
On all web services that require passwords, like gmail, you are asked to set a long password. Like 8 characters or more.
The reason being higher security.
But the same services limit the number of ...
0
votes
1answer
176 views
Why is the Web so complicated? [closed]
Hope it does not sound as a surprise to anyone that modern Web and its security, with the many layers and technologies, is pretty confusing and difficult to learn well. For someone with a good ...
0
votes
3answers
120 views
Is it safe to hash passwords on the users device?
I don't know much about hashing, but I noticed a (relatively reputable) site logging me into my account by sending the url parameter "hash=longStringIAssumeisTheHashOfMyPassword".
The point of ...
