Questions tagged [webserver]
A system whose primary function is to deliver web pages on request to clients.
1
vote
1answer
59 views
Risks of deploying a server authentication certificate along with a client application
What are the risks of deploying a client application with server authentication certificate (private + public key) so that a client application can host a webserver. Which is accessible via HOSTS ...
2
votes
1answer
92 views
Why use .ENV? What's wrong with storing secrets in a config.php file outside root directory?
Seems to be the general practice these days is to store secrets (e.g., DB, API credentials) in a .ENV file then load it to $_ENV and $_SERVER automatically. This popular library does that and it's ...
43
votes
8answers
12k views
Should log files be kept secret?
Accessing web server log files via a URL has a certain appeal, as it provides easy access. But what are the security risks of allowing open access to log files?
-1
votes
1answer
35 views
If I send request with PUT, and server return valid page with 403 status. This is correct work? [closed]
I send PUT. Server returned 301 status to valid http-address(!), but next response 403 status to hhtp-address. If I copy/paste this address all works correct. Please, say me: this is correct response ...
3
votes
1answer
117 views
Is it safe to open ports 80 and 443 in a home network
The intention behind this is that I'll be able to host a website from a home server (another pc with ECC ram etc.), but what worries me is that the network I'm using is also the same network which I ...
23
votes
4answers
5k views
Can an HTTPS server accidentally leak its private key?
Are there any known cases of HTTPS websites leaking the private key of their SSL certificate? Is it even technically possible for a bad website admin to misconfigure a site to send the private key as ...
2
votes
1answer
433 views
Is there a multi-layered DoS protection which can be tightly integrated with cloud hosting services?
I know that one can deny services (DoS) in any of the 7 layers of the OSI model and that in principle, a denial can be done by a single entity (human or machine) or from 2 or more such entities ("...
0
votes
2answers
25 views
SSL session key usage when browser opens multiple sockets to same server
Does a browser tab that opens multiple SSL-secured TCP sockets to the same server use the same session ID and keys for those sockets? I’ve seen pages served using HTTP open 5 or 6 sockets at the same ...
1
vote
3answers
168 views
How to prevent unauthorized users from accessing an image on my server just by URL?
I have a few dynamically generated images on my server (of high business value), which are supposed to be viewed only via our mobile app. The image is simply loaded from the URL as PNG. How can I ...
0
votes
2answers
58 views
Does HTML Purifier (which converts & to &) prevent HTTP parameter pollution?
If a REST endpoint (http://example.com) reads the p query parameter and pass it along to another endpoint:
http_get("http://example.com/api2?p=".$_GET['p']);
I will be able to exploit it by ...
1
vote
2answers
155 views
What can a site visitor do with a 777 file on my web server?
Sometimes I prefer working with text files instead of database as I can later manually edit the file content.
Imagine I have created a text file blacklist and chmodded it to 777. Let's say it is ...
0
votes
0answers
57 views
XSS : How to bypass htmlentities when < > " & is escaped and no input is inside a tag attribute with single quote? (the page is UTF8)
So lets say we have a website where they use htmlentities and everything like < > " & is escaped but not ' (single quote), but the problem is the only input available inside a tag is inside a ...
3
votes
2answers
100 views
Cipher Suite TLS 1.2 - Weak in OHS
I am trying to correct weak encryption in TLS, by doing a test in SSL Labs, it throws weak encryption in the following chpher suite:
Current Configuration:
SSLCipherSuite HIGH:!MEDIUM:!LOW:!aNULL:!...
1
vote
0answers
31 views
Rotating session names vs a static session name with a rotating validation string
I'm building my own session management library in the Go programming language and I had an interesting idea to save memory. I created something called an overseer that looks for expired and abandon ...
1
vote
0answers
36 views
Found possible malware code on site - contacted owner - what does it do? [duplicate]
Small question. I'm trying to figure out what a piece of code does that I came across on a website I visited.
The website has obviously been hacked into, as there's a bunch of minified PHP code up ...
2
votes
0answers
47 views
Protecting website from content theft [duplicate]
I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website.
If I upload file on my website like http://example.com/test....
0
votes
1answer
101 views
NIKTO: Requires Authentication for realm ''MD5''
I am trying to perform a scanning of a web server using Nikto using:
nikto -id id:pass -h xxx.xxx.xx.xxx
I am specifying HTTP Basic authentication credentials and indeed with this credentials I can ...
0
votes
1answer
47 views
Any threats/SQL injections possible, when single-quote is being escaped?
Let's say, when server-side application (like WordPress) applies add_magic_quotes to all GET/POST parameters ( $_GET = add_magic_quotes($_GET); ), so calling the url:
example.com/?id=a'b
the app ...
1
vote
4answers
159 views
Attacks on server-side web
What types of attacks are specific for server-side web, but not client-side?
From what I have found on the Web the most attacks focus on client-side rather than server-side.
0
votes
0answers
54 views
Technical Repercussions of SSN briefly touching a server
I need to safely pass a SSN to Stripe from a web page. (We are doing taxes for our contractors)
I am well aware that storing a SSN is not a good idea. We don't need to. Stripe can handle it, but I am ...
0
votes
2answers
126 views
What are the security issues of exposing default server home page in public internet?
I have seen on internet where several website companies have exposed the default home page of web server such as Tomcat, NGNIX, Apache web server. I always believe it is not the best practice to ...
0
votes
1answer
32 views
How to defend and attack single database on server?
Lets say I would have my own web server with MySQL database hosted together with new website. What are the techniques that I can protect it and what are called the attack that can query my db ? Is ...
0
votes
1answer
197 views
Client certificate common name? Subject alternative name?
For an IoT project, I want to secure client server communication. I want both the server (Apache) and the clients identify/authenticate each other (a client won't communicate with other clients) ...
1
vote
2answers
262 views
Server Side request forgery (SSRF) explanation
I am looking to gain a better understanding of the SSRF vulnerability.
I have googled and watched YouTube tutorials but they all show advanced techniques that are difficult to understand.
I am ...
1
vote
0answers
45 views
Protect website against attacks with iframe for user generated javascript?
I'm creating a small playground for people to write and test out their JavaScript on my website. I know websites like jsfiddle already exist but it's just for fun and for the sake of trying something ...
0
votes
1answer
785 views
Filter TLS in Wireshark or other monitoring tool
As part of the new best practices in hardening server communications I need to deny TLS 1.0 on the web server, before doing so I wish to identify the amount of clients whom connect with this level of ...
-1
votes
1answer
98 views
If a site has no input then can it be hackable? [closed]
If I made a website without any input box can Hackers still hack my site?
0
votes
1answer
56 views
Data on VPS is safe, or can accessed on rent VPS Virtual Server?
I rent a VPS server for two months to test a webapp. I insert data into SQL on this server and want to host web app to this virtual server for test.
Can that server owner that rents a VPS to me or ...
-1
votes
1answer
294 views
Obfuscated PHP code found on Wordpress site - has it been compromised? [duplicate]
Firstly - I expect the answer to be yes. But I never dealt with something like this so I would like some advice.
A client has recently complained that their website went down. So I started ...
3
votes
0answers
91 views
Why exactly are self hosted websites deemed that dangerous? [closed]
Up to now I'm using a raspberry pi as a local server for trying out things or hosting my own little projects (beginner level), but I want to make it publicly available (most likely only for people I ...
-1
votes
1answer
131 views
Attempting SQLi against website with WAF filter [closed]
I was pentesting a website when I discovered that the URL included the id parameter. Because of this, I knew that the id parameter might be vulnerable to SQLi. I received a 200 response and found no ...
1
vote
1answer
58 views
How to hide folders inside webroot from being identified?
I have a library inside my webroot:
https://my-website.com/wp-content/my-library-i-want-to-hide
Accessing the url via a browser gives me the expected permission denied error. However, I want to make ...
-1
votes
1answer
223 views
Secure version of httpd package [closed]
I am using
Linux xyz.co 3.10.0-514.21.1.el7.x86_64 #1 SMP x86_64 x86_64 x86_64 GNU/Linux
Tried to install latest version of httpd which is 2.4.33. But it is not available for RHEL7.
That's why I ...
1
vote
1answer
88 views
dangers of using WAMPServer on my home PC?
Hello there I have been working on (learning) web development and have gone down the route of self hosting at the moment. I have a website which I've made, it doesnt have any user interface for input, ...
-3
votes
1answer
86 views
How to determine if a website uses an internal WAF? [closed]
Is there a tool to know if a website uses a firewall?
0
votes
2answers
55 views
Usage of same certificate for client and server authentication
Let's assume I have a device that has both client and server applications running on it at the same time. The client application for example connects to a remote secure webserver (HTTPS) that requires ...
44
votes
3answers
6k views
How do hosting providers prevent the compromise of one website from causing the compromise of another one?
Could one create a vulnerable website on purpose to attack a server of a hosting provider?
So in the question above which I recently asked we came to the conclusion that preventing one vulnerable ...
7
votes
2answers
493 views
Could one create a vulnerable website on purpose to attack a server of a hosting provider?
Is it possible for a vulnerability in one application to be exploited to attack another application on the same server?
So according to the answer to the question above it is possible that when one ...
4
votes
2answers
292 views
Use mining to prevent DDOS attacks on websocket: Is this a viable solution?
I'm thinking whether the following way is a good way to completely and totally prevent ddos on my server. My idea is to use the same mechanism of cryptocurrency mining (bitcoin, with sha256 or any ...
1
vote
1answer
181 views
Damage of a leaked ETag
I've read multiple times that leaked ETags from Webservers are considered an information leakage vulnerability.
For example in the server response headers:
ETag: X/"1234-56789"
But I have not found ...
29
votes
5answers
8k views
Any reason NOT to set all cookies to use httponly and secure
Assuming a site is using all HTTPS all the time (LB redirects port 80 to 443), is there any reason not to force every cookie set by the application to use BOTH secure AND httponly?
Currently, for ...
1
vote
1answer
66 views
Do we need to have a private key on load balancer
We have the following scenario -
2 Load balancers serving traffic from multiple web servers
We have installed SSL certificate with private key on the web servers
Now, my question is, if we need to ...
1
vote
2answers
480 views
List of sites that still dont support HSTS?
I'm working on an article for work and seeking a list of the top ~500 websites (ranked by Alexa) that still don't have support for HSTS. Does such a list exist? I'm not getting any interesting hits ...
1
vote
2answers
426 views
Identifying website attack type (Meuhy.php)
We have a few sites hosting on a Media Temple (MT) shared server. This morning, we noticed that some of our website were down. Upon investigation, we realized that they had been compromised. The ...
4
votes
1answer
78 views
What are the risks of mismanaging apache users/permissions and what is the right way to do it?
Every time I install Apache to test a script, this question comes up for me. I don't do it very often, but I remember this being a pain point since about 2007.
A lot of tutorials/forums recommend ...
2
votes
1answer
134 views
How secure IIS run together with XAMPP?
I'm using IIS for web server & run phpMyAdmin via IIS.
But now, I saw someone use IIS and XAMPP. There is something I wanted to know.
Usually they set : XAMPP to localhost:81 or localhost:...
0
votes
1answer
83 views
Is Aria2 downloads detectable by web servers?
A couple of months ago I signed up for a paid online course. Their terms of service indicate that these video lectures are for streamed viewing and not to be downloaded. There's a 2 hour commute from ...
0
votes
1answer
133 views
Server encryption to prevent access by hoster
A friend told me one of their company servers got recently hacked. The server was super secured software side.
It turned out the attacker called the hoster and used some social engineering skills to ...
-5
votes
1answer
111 views
what type of server is best for launching a vulnerable application on an Organization network? [closed]
For a demo purpose i need to install a vulnerable application and i tried using XAMP server but it opens up many ports and not safe to use it. so please recommend a server to launch a vulnerable demo ...
0
votes
0answers
30 views
Can a website run a malware on my computer? [duplicate]
Can a website install a malware on my computer and run it in the background without my knowing about it?
