Questions tagged [web]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
271 views

Getting and then distributing a wildcard SSL certificate — is this okay?

I have a stupid/crazy idea that I wanted to ask about here. It's probably not going to work, but I'm curious. Browser security won't allow insecure web sockets (ws://) from secure (https://) pages ...
7
votes
2answers
1k views

Serving a php webshell without running it locally

I am using Kali Linux in a pentesting lab. By entering the following URL on the victim system I can get it to access my apache server (I see a 200 access response in my logs), but the php file ...
22
votes
5answers
8k views

Could hashing prevent SQL injection?

On a whim I've recently decided to throw up the first proper website I created onto my local web server I use for development. I thought it'd be a great environment to throw some SQL at for injection ...
2
votes
1answer
350 views

Extracting as much information from a browser request as possible?

I am currently working on project that involves identifying spammers who are creating fake accounts on my site. I am interested to know what type of information I would be able to extract. First of ...
1
vote
2answers
156 views

Filling out ssn on a web form for printout purposes

We have a website that requires some private information such as ssn to be filled out. The users would have to complete the form, print, then fax the form. We don't store the ssn information but we ...
1
vote
2answers
13k views

trying bypassing htaccess based basic http authentication

I am trying to solve this web challenge which requires to bypass an htaccess based form authentication. after some research i tried to change the request to GETS /admin/ HTTP/1.1 Host: htaccess....
-1
votes
1answer
39 views

White-box webpage testers [closed]

I wrote a webPage and i want to localy scan all files in search of somes common vulnerabilities. I searched on the internet a lot and i can't find white-box tools as I thought. Instead of this, there ...
1
vote
1answer
98 views

IP Address and Site Verification

I just got interested in the kind of technologies that are employed in verifying the ownership of a website/domain or IP address. More specifically, a couple of online services offer the possibility ...
3
votes
1answer
2k views

Breaking JS String XSS

I've been searching for XSS vulnerabilities in a friend's website (blackbox) and in one of the pages he takes your input and puts it inside a js script, window.location="[INPUT]"; I couldn't break ...
1
vote
1answer
549 views

Is it possible to load external JS script through the “inspect elements” feature?

Open Inspect Element Right click on the body tag, or where ever, then Edit as HTML like this: <button onclick="loadScript();">;Click to load external script.</button> <script> ...
-5
votes
2answers
2k views

I'd like to pen-test my website, what tool would you recommend? [closed]

I have downloaded my website/database and recreated it on a Centos 7 server locally. I'd like to give it a good hammering with a view to finding and fixing any vulnerabilities. Can anyone recommend a ...
3
votes
1answer
122 views

Popular website contains ad that triggers remote scan from botnet: what should I do?

One of my country's main TV channel has a website from which one can watch it live - in streaming. Obviously, it serves ads in the meanwhile, mainly from google partners. One night I had the website ...
0
votes
1answer
57 views

Secure messenger in web page

I need to make the Messenger in the web page secure. For that I use encryption with AES. So, when one person writes another, the message is encrypted, sent to the server, saved in the DB, and then ...
0
votes
1answer
62 views

What is the risk of unlimited email event triggering?

Let's say I can trigger a mail event in a few scenario's without any a limit on that trigger. For example at: Registration Password reset Newsletter subscription The "registration" and "newsletter ...
0
votes
1answer
28 views

Security pertaining to Client-side validation

One of my websites has a webpage wherein it has a button/link named 'BACK'. Anyone clicking on this button/link will redirect user to HOME page of the application. Now if the user change the URL on ...
74
votes
10answers
12k views

Are security flaws acceptable if not much harm can derive from them?

Recently, I have discovered a security flaw in a business website. This website has a password-protected "Partners Area", and like many websites it provides a form to reset the user's password. When ...
0
votes
1answer
1k views

Which WYSIWYG editor has the best security reputation? [closed]

I would like to use a pre-built WYSIWYG editor such as TinyMCE or CKEditor in a website that I'm building. Since I expect my users to be entering confidential information into the editor it is ...
0
votes
1answer
126 views

Is it a good idea to preventive use a robots.txt that disallows all search engines to index query strings in order to slow down reconnaissance?

I know that robots.txt is not a security feature. But, indexed and cached information by search engines might be incredibly helpful in the reconnaissance phase of a penetration test and potentially ...
13
votes
4answers
10k views

How to perform a proper DDoS test in a safe and controlled way?

What is the proper and safe way to perform a DDoS test without crashing the whole infrastructure? What different types of DDoS attacks are there and what things should be considered performing such a ...
2
votes
1answer
114 views

Should every website or web-application have a Responsible Disclosure Policy and what are the drawbacks of having such a policy?

The Dutch National Cyber Security Centre, NCSC* (daughter of the Ministry of Security and Justice) published a news article* regarding a Responsible Disclosure Guideline in the beginning of 2013. The ...
2
votes
3answers
114 views

Should public access to specific filenames and -types be denied preventively?

Is it a good idea to preventively disable (public) access to certain filetypes (by extension) and/or by filenames: in the server configuration (in case of a shared hosting server) or, as a rewrite ...
1
vote
1answer
163 views

What causes the descriptive text in HTTPS lock icons? [duplicate]

Some websites have descriptive text next to their lock icon. While many other websites (like Google) simply display a simple green lock icon. What causes this? And does this text have a special ...
1
vote
2answers
654 views

Password Encryption For PHP 5.3 or Should We Update to 5.5+?

I'm trying to hash passwords for our company site. After testing on a local Apache server that has PHP 5.5.9 and everything working as expected, I went to test on our live server being hosted by ...
2
votes
0answers
1k views

Apache Web Server ETag Header Information Disclosure Weakness

How this vulnerability allow remote attackers to obtain sensitive information likes inode number and child process though ETag header ? and how to locate path to a file from inode number ?
2
votes
0answers
142 views

What attack-methods for HTTP/L7-Attacks (Reflection and Co.) are you aware of [closed]

I know the following and would like to collect some more methods on how to attack websites and services via misused 3rd-party-applications: Wordpress PingBack/xmlrpc (seen a lot and wildly used) ...
1
vote
4answers
246 views

Best Option for SSL Certificate for 2 Domains + All Subdomains

I am hosting multiple websites on my Mac Mini server (latest version). For some reason OS X server does not support multiple SSL certificates well for websites, and after hours on the phone with ...
1
vote
2answers
661 views

Is this a session fixation

I really can't understand the session fixation attack. I've read OWASP definition that said: Session Fixation is an attack that permits an attacker to hijack a valid user session. The attack ...
4
votes
1answer
315 views

How to automate sending messages about abused internet hosts

I have just looked into the error logs of our web server and I have observed a great increase of SQL injection attacks this year. Those attacks, more than 3000 in 2016, usually look like this: ...
3
votes
1answer
96 views

Should users be able to update their avatar using URL instead of uploading a file?

I am building a web application where a user can update his avatar by uploading a picture from his computer file directory. Here's how I implemented it: <input id="profile_pic" class="avatar-...
-1
votes
1answer
116 views

Do html request message have secret information? [closed]

Recently, I read a paper which describes an attack on http response protocol. The attack is called CRIME or CRIME Extensions. It exploits TLS compression algorithm by checking the total payload of ...
24
votes
3answers
6k views

How to deal with WPE users

I own a chat room and some users use a program Winsock Packet Editor, "WPE PRO". With it they manage to bypass chat rules, like they can't be muted or kicked, and they can send messages fast ...
1
vote
4answers
914 views

What is the security of one time login with SMS code?

I am writing a web application and I want to let my users to login by sending one time code to a given number. The code will be received by a GSM module within certain time after it's generation and ...
2
votes
1answer
65 views

Malicious link? Apache?

I've got a link from spammer, the link is very strange, but after redirects I got the web page full of ads. Here is the link(doesn't require "http://"): /0xD805A9E4///RLI=590-UI=273411771-OI=6313-...
52
votes
4answers
6k views

Why submit a website to plaintext offenders?

I've read this question and to quote from the accepted answer Besides that, by submitting the site to plaintext offenders, you will provide a third-party point of view, which might help your case. ...
152
votes
5answers
13k views

What to do if stuck with website that has poor security?

I have a student loan account with a company, not the biggest company but big enough to where they should have their act together. Today I couldn't remember my password to log into my account ...
0
votes
1answer
90 views

Verifying that a request is internal

I've got a web app that will only output safe code. It needs to pass this to a Python backend. The logical way to pass things between JavaScript and Python is to have a Flask server running. Then, the ...
4
votes
4answers
442 views

Are limited length passwords a security risk? [duplicate]

I found a webpage where users can be registered. However, it seems that the length of the password must be between 6 to 12 characters. Is that a security risk?
5
votes
4answers
328 views

Why are common security measures on a webserver not enough on a large scale?

Why do simple things (SSL, RSA identification, salted and multi-crypted users passwords, script injections awareness, firewall...) that one rigorous mind usually setup when installing a web server are ...
-2
votes
1answer
65 views

How to add scripts in HTML file passing through network? [closed]

how to add JavaScript file to every HTML document that is passing through your network ?
-4
votes
1answer
86 views

Can I disable corporate monitoring by disabling my network connection? [closed]

Can my activities be traced if the Ethernet cable is not connected? If I disconnect the company's Ethernet cable & connect my PC to tethering, will the browser history be still captured once I ...
6
votes
1answer
5k views

How to test the validity of DNSSEC from a command line interface?

I am doing a research project on The Domain Name System Security Extensions (DNSSEC). I have a SOA, Stub resolver and a client as well as a attack machine. My question is this. Is there a way to ...
2
votes
1answer
2k views

HTTPS green bar loads then goes away

I have properly configured SSL, and it loads pages when you put HTTPS. My problem is that when the page is loading. The bar will turn green, once the page is fully loaded. The green bar goes away. The ...