Tagged Questions
An application that is accessed over a network such as the Internet or an intranet using a browser.
1
vote
1answer
41 views
Preventing XXE Injection
I've stumbled upon an exploit method which I haven't really had time to investigate before. XML eXternal Entity is said to be susceptible of a server-side type of injection. I can specify a Document ...
4
votes
2answers
34 views
Is hashing schema information for client when generating SQL queries more secure?
I'm planning to implement a web system wherein APIs and presentation for CRUD in data tables are automatically generated, like that in phpMyAdmin. How I plan to implement this is to construct SQL ...
2
votes
1answer
34 views
Can you steal session cookie with BREACH attack?
Most of the discussions about the BREACH vulnerability are around stealing session-based CSRF tokens. But if you can steal a session-based token, could you also steal the session token itself? ...
-5
votes
0answers
51 views
Link to more active security sites? [on hold]
I have a BS/MS in Computer Science and have worked as a developer for 15 years. Currently I have been reading a lot about computer security.
Serverfault and Stackoverflow seem to be the go to place ...
4
votes
2answers
89 views
Shop saves credit card data from guest orders
A web shop allows customers to order as guest or to create an account.
I ordered as guest, entered my email address and the shipping address, and payed per credit card (I had to enter the security ...
4
votes
3answers
214 views
+50
Do WebGoat style XSS attacks still work?
I am going through the WebGoat exercises, to refresh my knowledge of XSS attacks.
Specifically, I am doing the Stage 1 XSS exercise. This exercise has a form that deliberately does not sanitize ...
1
vote
1answer
29 views
add another layer of protection on top of oauth 2
My Rest API is protected using Oauth2. My main client is a native app.
it's working great but there are certain calls to the API that i want to make sure that are performed from my client - meaning ...
0
votes
3answers
46 views
Does it make sense to talk about open source software in the context of web applications? [on hold]
Why do people care if something is open source or not? I can think of at least 2 things 1) to be able to customize it to their needs 2) to check for security concerns such as backdoors.
These aren't ...
0
votes
0answers
40 views
most widely applicable email encryption technology [on hold]
A private web application needs to send and receive encrypted emails with perhaps a few dozen known users. This is a Java / Spring MVC app running on a CentOS 7 server, and using JavaMail to connect ...
-2
votes
0answers
33 views
Technical Pentest Name on Intrusion via Enumeration? [closed]
Okay, first off, it so happens that I was given a penetration test which were rejected by my lower vulnerability researchers (basically coming from the bug bounty family). As a part of my job role, I ...
-9
votes
0answers
52 views
Server side encryption [closed]
In my research work i used only server side encryption of data and my external examiner asked that why I used RSA algorithm for encryption on only server-side and not client side so i am confused for ...
1
vote
1answer
84 views
mail.google.com identity doesn't match
I got
This website doesn't supply identity information
in firefox while browsing gmail.com, I understand that would be because I understand it is required when it needs to load content using ...
2
votes
1answer
59 views
Is TLS enough to prevent eavesdropping? [duplicate]
Is it enough to use only SSL/TLS for client-server application with authentication, registration and data transmission (like chat)? If it is not what I also need to use?
1
vote
2answers
60 views
Circumventing disadvantage of IP-based account lockout
So we're trying to prevent brute-force attacks on our web server login page--currently we just do IP-based locking if x failed attempts from IP address Y occur over z time period. After a security ...
3
votes
2answers
36 views
Issues with using TLS Session Id for Web App Session?
Apache Tomcat has the ability to use the TLS Session ID instead of a session cookie or JSESSIONID in the querystring. My site is HTTPS Everywhere.
This seems useful in that I don't have to worry ...
3
votes
3answers
83 views
PHP | Security for allowing user uploads
My Sittuation:
I am creating a web application with PHP which allows users to scan their files for viruses. It allows the user to upload their files via the html "file" input type or via a URL. I ...
-1
votes
0answers
29 views
What are the specifics on non-compliance for a US Financial Institution (CU) that has a website using shared hosting, and apache HTTP authentication [closed]
Take for example, a US Credit Union that has a web site/application with extremely poor security.
The example website is hosted on a large shared host, with hundreds and hundreds of employees from ...
3
votes
4answers
1k views
Is it secure to have source code for website public? [duplicate]
I am working on a website and would like to have it under revision control. I have used git for earlier projects before and I like it. This project though is a website written in Django. I am totally ...
2
votes
1answer
35 views
Avoid brute-force enumeration of customers in a SaaS application
I'm involved in the development of a SaaS application. We host the application for different customers. A customer is a company. Each customer gets access to their hosted instance of the application ...
0
votes
1answer
35 views
rate limiting and access filter for web application
I had a requirement of rate limiting and dynamically access controlling access to web application dynamically
I want to be able to rate limit access turned on / off dynamically
black/white list ...
2
votes
1answer
52 views
Freelance web app tester law on breach after scan [closed]
If I was to do a web app test on a companies site and I didn't spot something and the company was breached via the app I tested what come back could I possibly have ?
How could I protect myself ...
2
votes
1answer
52 views
Basic nginx securing / restricted access [closed]
I run a private virtual server on Ubuntu 14.04 and I use Nginx as my http server and/or reverse proxy. I run multiple webapps on this server, most of them are fresh open source projects.
UPDATE :
...
6
votes
1answer
107 views
Secure forgot password page: Is a server-stateless implementation viable?
This is yet another "How is a forgot my password page done right" question. However, it explicitly addresses two implementation options that I have come across recently.
The common approaches [1,2] ...
2
votes
3answers
182 views
External cross domain include script
One of my web application underwent a vulnerability assessment recently, and one of the findings is about cross domain include script. Our web app uses addthis_widget.js from AddThis to bookmark ...
1
vote
1answer
73 views
User Authentication for a public website in 2015
I am creating a new website for online shopping in .net and was wondering if i have another option beside Forms authentication to validate the users in a safe and secure way (this has been around for ...
0
votes
0answers
25 views
SSL certificate for Web App + website [migrated]
I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store.
I am also developing a CherryPy Python Web App ...
0
votes
1answer
33 views
How to evaluate the overall safety of a web offering? [closed]
Background: I have been trying to find a simple app to document my children's milestones in life.
I have been signing up for a couple of free services and trying to evaluate their offerings. I ...
0
votes
0answers
42 views
Clarification on a website security
I am new to work on website handling and here are my questions.
1) How can I ensure that the pages accessing is secure enough for data transmission , sql injection and several other attacks.
2) How ...
0
votes
2answers
107 views
Google Analytics: Hacked or Ghost Referers?
I posted this question (Hacked or Ghost Referers) on Google groups earlier today, but I also wanted to see if the security experts here have any insight into this behavior.
I've got a web application ...
0
votes
2answers
71 views
Are CSRF tokens useful outside of web APIs?
I'm trying to understand CSRF tokens and one thing isn't making sense to me.
For a web API, you can provide a CSRF token just once, on authentication, and expect the client to remember that token ...
0
votes
2answers
59 views
Login account check [closed]
Suppose you want to create a new account in any website (let's make it Facebook), how do they check the Gmail ID or any mail ID we entered is a valid mail ID? I observed that some websites are ...
1
vote
2answers
98 views
Should CSRF token without session cookie work?
Let's say that website example.com has CSRF protection.
They send CSRF token in custom header and in hidden input fields.
For example to add new folder, your http request need to contain CSRF token.
...
0
votes
1answer
53 views
Web app and database on same server, what is benefit of encrypting database data?
If a web app and a database are on the same server, what is the security benefit of encrypting database data? Obviously passwords should be hashed either way.
I assume that if an attacker can ...
3
votes
5answers
141 views
Is it dangerous to serve user-uploaded Flash (SWF) files?
I'm working on a site that has CMS functionality. I'm considering allowing users to upload Flash (.swf) files and then displaying them on my site.
Is this a bad idea?
Is there a way to do this ...
1
vote
2answers
53 views
Credentialed scans and the Burp Suite active Scanner
I have been running scans on a few web applications that require a typical username and password to gain access to the website. I usually remain logged in through the browser my proxy is running ...
0
votes
1answer
47 views
How can I secure my server to ensure pre-login calls are originating from my app?
I have a .NET Web Api servicing a Cordova based mobile app and web front end written in AngularJS. I have done a ton of research and most sources don't give a great answer or one that's huge overkill ...
0
votes
0answers
34 views
Is Apache enough to prevent unauthorized access? [migrated]
I've just been assigned to finish the development of an application which has user restricted access. The original developer was a co-op student, as am I.
After looking over his code it seems that ...
1
vote
1answer
66 views
Secure copy-paste from phone to computer
Some computers on my university block the keepass application which I use as a password manager. I'm thinking of building a small web application + Android app which lets me securely copy a string ...
0
votes
2answers
101 views
Best place to store authentication tokens client side
When my users are authenticated they receive an authentication token, I need to use this authentication token to authorize some asp.net WebAPI calls. To do this I need to add the token to the head of ...
-1
votes
3answers
191 views
How to check for sql injection attack? [closed]
We do our final year project related to sql injection. For implementing sql injection attack which IDE or tool we used? bcoz netbeans and other type of IDE are more secured?
-1
votes
1answer
30 views
Solving the code delivery problem via hashing the source GET'd [closed]
TLS gives you the confidence you're talking to the servers you trust, right? Yet, why should I give confidence to a page (likely to be a application today) that I've never read the source code, ...
0
votes
1answer
52 views
How to save a web page with its certificate?
I've made a payment to an online store and they're claiming there's no order with the number that appeared in my screen, therefore they're refusing to send me the product. I still have the page opened ...
2
votes
1answer
88 views
RESTful web application security and authentication scheme
I am building a web application where the front-end is a single-page-app and the back-end serves it through a RESTful API. I want to make sure I implement user authentication with the best security ...
0
votes
3answers
73 views
When to set security questions for a web application?
For enhanced security, we can use security questions and use them as a means for users to reset forgotten passwords or as an additional means for authenticating.
When would we be the right time to ...
2
votes
3answers
112 views
Is it important for a web application's middle-tier to use a different communication protocol?
When building an n-tier/layered web application where each tier is physically separated from the others, is it important for a different communication stack to be used by the backend tier(s)—which are ...
0
votes
1answer
88 views
How could one defeat Webtrackers
I was just wondering why some pages refuse to load completely while surfing with no-script Plug-in when I don’t allow specific Java scripts. I was wondering if there is some way to hold the tracker ...
1
vote
2answers
38 views
HTTP BA from a different Server [duplicate]
There is a weird situation that I am stuck with regarding HTTP Basic Authentication.
Below is a hypothetical situation:
Lets say there is a certain domain, say https://myfacebook.com
and there is a ...
1
vote
3answers
74 views
Is there an SQL injection equivalent on url-passed parameters to a servlet?
In SQL injection an attacker can craft a string that if left unchecked and executed it can complete and execute arbitrary SQL commands.
Is there an equivalent to these kinds of attacks in JSP pages? ...
9
votes
3answers
795 views
Why should I use whitelist on a WAF?
I was studying different WAFs, from open-source (such as ModSecurity and NAXSI) to commercial solutions (Imperva, Citrix, Fortinet, etc.). Many people state that having a whitelist-based WAF is far ...
1
vote
2answers
115 views
Security of php code on webserver - obfuscate?
Can the php source of a web app be considered safe on the server, or is it worthwhile obfuscating the code to reduce the chance of successful theft?
I think my question boils down to 'Is there a ...
