Questions tagged [webserver]

A system whose primary function is to deliver web pages on request to clients.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

How to deploy Gophish in a running IIS Server [migrated]

I am a beginner in Windows Server management. Currently, i have a VPS which already has a website running in IIS 10. Also have a domain which already point out to the Server's IP Address for that ...
Bang Fady's user avatar
1 vote
1 answer
100 views

Public client or Confidential client: should I generate a client secret?

I've read about this but I don't fully understand how to choose. I have two options: Public client "A native, browser or mobile-device app. Cognito API requests are made from user systems that ...
BigMistake's user avatar
1 vote
1 answer
82 views

Are webservers's file serving safe against timing attacks?

Context I've been recently looking at UUIDs (mostly v4) and their uses to maybe start using them in some of my apps. I started asking myself some question about security as one does. Then I fell on ...
Stefmachine's user avatar
0 votes
0 answers
55 views

Trying to generate TLS 1.3 Alert

I am trying to run tests on the TLS 1.3 protocol and I would like to generate alerts (as seen in TLS 1.2) that have a structure of the type ALERT:FATAL UNEXPECTED MESSAGE. So far, I have tried to use ...
Multi Uni's user avatar
0 votes
1 answer
64 views

Detect invalid cert Android client if URL being redirected to a fake server [duplicate]

Here is the scenario: Server A is an authentic server (A.com). Server F is a fake server (F.com) that also has a valid cert for F.com has a copy of A.com certificate to it (to fake as A.com). Client ...
Tung D. Nguyen's user avatar
1 vote
0 answers
129 views

Which is safer - using the sql_conn Flutter package or using a web server as a middle layer for requests against a SQL Server database?

We are currently working on setting up new Android handheld devices (RF guns) to read/write to our SQL Server 2019 database and are at a fork in the road in deciding what to do. Both options below ...
TheMortiestMorty's user avatar
0 votes
0 answers
69 views

Identify hosts that are serving specific metric on Shodan

Using things like Shodan and Zoomeye we can find tens of thousands of exposed Prometheus endpoints with queries like service:prometheus port:9090 etc.. Now let's say we know that there are entities on ...
vl.b's user avatar
  • 1
1 vote
2 answers
111 views

How to prevent attacks on a personal webserver

I'm currently working on some modules on hackthebox. In that regard, I recently set up a web service: sudo python3 -m http.server 8080 When I did a wget to my server, it showed up in the log as usual, ...
hay's user avatar
  • 19
0 votes
0 answers
218 views

Reverse proxy server in DMZ with separate server for nginx (docker)

Does it makes sense to create two separate docker hosts (VMs) for reverse-proxy and web application? My first idea was to put the web-exposed application in my separated VLAN (DMZ) where only ports 80 ...
ZeroW's user avatar
  • 1
0 votes
1 answer
139 views

HIPAA Compliance for Frontend Hosting

I am using a non-HIPAA-compliant vendor (Vercel) for the hosting of my site. This includes serverless functions on Vercel's infrastructure that serve HTML/CSS/JS. However, the entire backend/database ...
Infamous911's user avatar
0 votes
1 answer
216 views

What vulnerability query params or body outside a whitelist can allow?

For instance, suppose we have a request that uses the field name in a request's body or query params, but the client sends the params name and age. Some web server frameworks allow us to strip ...
Vitor Figueredo Marques's user avatar
1 vote
1 answer
94 views

Unlisted directory discovery of a web server without using bruteforce attacks

Some creator I support on SubscribeStar hosts their files on a dedicated AWS web storage server of theirs and the names are easily accessible and sometimes guessable without any kind of security or ...
Matcha's user avatar
  • 111
0 votes
2 answers
80 views

Web request TLS

What version of TLS would be required for a router that separates client requests from a web server behind a router? Let's say the supported TLS client is 1.2 and so is the web server, BUT the router ...
cadobe's user avatar
  • 3
0 votes
0 answers
103 views

Where is the safest place to put servers

Currently, I have modem with built-in NAT and DMZ. I have 250Mb of webspace and unlimited emails supplied by my ISP on WAN. I want to move the webspace to my own PC on a LAN along with the emails so I ...
Lonewolf's user avatar
0 votes
1 answer
482 views

Does a DDoS Attack affect the internet connection apart from the service it's attacking?

Lately I've been experiencing some crashes related to my internet connection, I'm on the process of pin-pointing what is causing the issue and one of those possible causes might be a DDoS attack, ...
Kevin Mac-Ginty's user avatar
0 votes
0 answers
219 views

Trying to understand HTTP request containing base64 encoded part and email address

I have public webserver serving static html pages and when analyzing error logs I found type of attempted GET that I don't understand. They are formed like this and fail because request is too long: /...
Madoc Comadrin's user avatar
0 votes
1 answer
69 views

How spamming entries in website database using the same IP address is possible?

I am working in a private company as VAPT Auditor. I am currently testing one of our project website which contains common features like login, sign up, etc. I mostly do manual testing using BurpSuite ...
Solo's user avatar
  • 1
1 vote
1 answer
282 views

Is my website under attack?

I have a web server. I was investigting why my nginx is keep crashing. I noticed a few other issues in my logs. Note: In the log report, I replace the name of my website with example.com and my second ...
martiz's user avatar
  • 11
1 vote
1 answer
255 views

Is running PHP file_get_contents on random user-generated links safe?

In one of my PHP apps, I have a part where it scrapes the content of random links on the internet using file_get_contents, and then it runs a regex on this content to find all the email addresses in ...
Syed M. Sannan's user avatar
1 vote
1 answer
87 views

"Pass-through" website interception detection and prevention

I face some sort of "MitM" attack type that I don't really know how to search, because I don't really know what it is called, so I am in the dark here, and need some help and advice. Let's ...
Iraka's user avatar
  • 13
1 vote
2 answers
78 views

Are there any attack vectors against the Smarty-PHP template engine when using a trusted template?

This is actually a general question about template engines. If I use Smarty-PHP to generate a website, and the templates and content are both created by me (assumed non-malicious), does this create ...
Drew's user avatar
  • 135
0 votes
1 answer
101 views

Parse a File on Client and Send to Server Without Client Manipulating Data

I have a desktop app that takes a file format and parses it to get some JSON data that is then send to a server. My problem is figuring out if it is possible to somehow parse the data on the client ...
dacite's user avatar
  • 1
0 votes
1 answer
181 views

Server Side Template Injection (SSTI): Difference between plaintext context and code context?

I am learning pentesting, currently studying Server Side Template Injection. I understood there are two types of SSTI - plaintext context and code context - but struggle to understand what exactly is ...
Sven's user avatar
  • 125
0 votes
0 answers
512 views

Do I need https for a web server that will be used locally? [duplicate]

I have a web server that will be used to manage the stock of a warehouse in a factory. The web server will be accessed only locally so the clients can update and view the available stock. The server ...
uzer123's user avatar
3 votes
1 answer
347 views

Is there a reason for a server-side limit on the number of HTTP headers allowed for each request?

The security team at my company has set a limit on the number of headers a HTTP request can contain (not header size, but an actual hard count limit on the number of headers). A vendor has added a few ...
Jessica's user avatar
  • 133
1 vote
1 answer
161 views

What is <title>(.*?)<\/title> and how the attacker use that?

I had a log from my web server like this [28/Aug/2022:12:57:02] "GET / HTTP/1.0" 200 1684 "" "<title>(.*?)<\/title>" What is this meaning and what exactly ...
Dita Aji Pratama's user avatar
0 votes
1 answer
119 views

Is HTTP Request Smuggling domain/subdomain wide or directory wide?

I have a pretty good understanding of HTTP Request Smuggling vulnerabilities but one thing I still need some clarification on is if they are domain/subdomain wide or directory wide? Here's what I mean:...
ex7lted's user avatar
  • 50
0 votes
1 answer
121 views

Site "can't" change username, why? [closed]

There's a website I have an account on, and I needed to change my username. They said they were unable to change that. I requested to just have my account deleted, and then I would create a new ...
Thomas's user avatar
  • 1
1 vote
0 answers
133 views

Why is it a security concern to modify http.sys registry entries to allow web service to accept a longer query string?

I have an Http web service running on IIS. The Http service will be exposed to the public internet, but only authenticated client requests will be processed by the web service. The service allows ...
hpatel's user avatar
  • 11
1 vote
2 answers
534 views

What is the effect of the "&x=" in a SSRF? Is it something related to encoding?

I'm learning SSRF. I learnt that typing &x= kinda turn off the rest of an URL (like https://some.website.com/user?id=9&x=.website.com/api/item?id=9) Everything that comes after the &x= ...
Ezau's user avatar
  • 13
0 votes
1 answer
526 views

What is the intent behind these unknown HTTP Requests into my AWS Web Server?

I know about the usual port sniffers and mass scanners that just pop up on any web server, but this one looks interesting to me. I figured out so far that those requests aren't really an issue for my ...
Flying Thunder's user avatar
0 votes
1 answer
132 views

Can attacker gain access to my private network application through pivoting and/or lateral movement?

I am using a public wifi network. When I start a nodejs express server at my local system at port 3000, I can access that website on another device (that is connected to the same public wifi network) ...
an0nhi11's user avatar
0 votes
1 answer
45 views

Do I need to set up super global SESSION for a web form?

I am building a web form in PHP, is just for the user to request information about my services or send comments, so I don‘t need the user to be logged with a username and a password, no databse. I ...
limakid's user avatar
0 votes
1 answer
521 views

Why is Nessus report HTTP running a web server on port 80 when I'm sure that it isn't?

From a Nessus scan I have the following output regarding HTTP and the use of port 80: Info N/A 43111 HTTP Methods Allowed (per directory) Info N/A 24260 HyperText ...
Sjim49's user avatar
  • 23
2 votes
1 answer
170 views

Is it safe for website to generate fake profile pages?

Today I found a website which generates a fake profile when asked if said profile exists. Example: www.site.com/user/mycoolname doesn't exist yet. But if I put it in the browser for the site I get a ...
Phaidrin's user avatar
0 votes
1 answer
494 views

Do WSGI servers connect to devices outside of the network?

I want to set up a plotly dashboard and view it from my browser. Plotly gets set up as a flask application. I'm of the understanding that I should use a WSGI server to host it. I'm looking at waitress ...
Cauder's user avatar
  • 101
0 votes
1 answer
40 views

Recommended secure option for uploading files to web server from a dynamic IP?

I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to ...
user1324762's user avatar
0 votes
1 answer
608 views

Url only works from the browser it is generated from. Copying it into a Curl Command fails, and gives a 403 error. How can I fix this?

I am doing some web scraping for streaming files, .m3u8 mime type. In this particular instance, I can't create a functional request that does not end up with a 403 Forbidden error. How to reproduce: ...
Jannies - They do it for free's user avatar
0 votes
1 answer
45 views

Multiple random requests for Non-Existent URLs from a single IP resulting in 404s

We sometimes get to see this behavior from a single IP address/logged in user - There are a lot of hits on our server that have .png at the end of the URL which results in a 404 because we don't have ...
Pranav's user avatar
  • 1
0 votes
0 answers
13 views

How to detect web account vulnerability [duplicate]

I know I might take a lot of flack for asking this basic question, but I hope you'll be patient with me. I was looking at a few websites and analyzing the payload when sending a POST request to login. ...
Robin Sage's user avatar
1 vote
2 answers
89 views

Securely storing password and encryption key on AWS

I have an EC2 Webserver on AWS which has a MYSQL database. The login data is stored on AWS using the Secret Manager. I have added an IAM role for the Server to get access to the password and an ...
JavaForAndroid's user avatar
5 votes
3 answers
3k views

Do we need to check for cross-origin on server side?

Modern browsers don't allow cross-origin requests - those must be explicitly allowed by CORS headers. But looking at Java back ends like Tomcat/Spring MVC I see that it's possible to reject requests ...
Stanislav Bashkyrtsev's user avatar
0 votes
3 answers
229 views

successfull log4j exploitation, or just normal traffic?

First, thanks in advance and sorry if I'm asking some really silly thing, this is not my expertise :) I have a webserver just for testing my things. Last week I checked if it was vulnerable to log4j ...
dalaix's user avatar
  • 1
0 votes
0 answers
591 views

What should I do after an attempted Mozi attack?

I was testing a small webpage using Django's built-in server. The webpage simply shows the IP of the visitor of the webpage, and prints the IP address in the terminal. The server is hosted on a Ubuntu ...
George Tian's user avatar
0 votes
1 answer
99 views

How can 2FA help prevent formjacking?

This article by Avira (part of NortonLifeLock) claims that 2FA (2-Factor Authentication) may be sufficient to protect against formjacking: Enable 2-Factor Authentication: Create strong and complex ...
End Anti-Semitic Hate's user avatar
0 votes
0 answers
230 views

Is it possible to hide a servers location on the internet?

Can you make a server appear to be in another country and how would you do it?
Robert's user avatar
  • 1
3 votes
3 answers
443 views

Someone found an obfuscated path on my website. Is this possible without hacking my site?

I am running a server with Django and Nginx. I tried to hide the admin panel by assigning it a 50digit random string as URL (something like https://mydomain/asidfhifuerbdsi...). Now someone found this ...
Nik's user avatar
  • 131
2 votes
0 answers
66 views

What does this potentially malicious php code do? [duplicate]

Somebody hacked my webserver and uploaded many of the following files with random names in different subdirectories of my webroot. The file looks something like this and - even though I managed to ...
JohnTheWalker's user avatar
1 vote
1 answer
138 views

Does it make sense to configure the web server to deny obviously malicious requests?

I have a Ruby on Rails app behind Nginx. Every once in a while I see requests like GET /phpmyadmin or GET /wp-login.php. Since I don't have those tools installed, it's obvious that those are from ...
art-solopov's user avatar
1 vote
2 answers
298 views

Is there way to know what headers can be accepted by HTTP server?

Imagine that there is server required authentication for getting an access to some endpoint. And developer added some logic to bypass the authentication: if server recieve HTTP header give_me_access=...
Ярига Олег's user avatar

1
2 3 4 5
20