Questions tagged [webserver]
A system whose primary function is to deliver web pages on request to clients.
912
questions
0
votes
1answer
28 views
How can 2FA help prevent formjacking?
This article by Avira (part of NortonLifeLock) claims that 2FA (2-Factor Authentication) may be sufficient to protect against formjacking:
Enable 2-Factor Authentication: Create strong and complex ...
0
votes
0answers
63 views
Is it possible to hide a servers location on the internet?
Can you make a server appear to be in another country and how would you do it?
3
votes
3answers
348 views
Someone found an obfuscated path on my website. Is this possible without hacking my site?
I am running a server with Django and Nginx. I tried to hide the admin panel by assigning it a 50digit random string as URL (something like https://mydomain/asidfhifuerbdsi...). Now someone found this ...
2
votes
0answers
64 views
What does this potentially malicious php code do? [duplicate]
Somebody hacked my webserver and uploaded many of the following files with random names in different subdirectories of my webroot. The file looks something like this and - even though I managed to ...
0
votes
0answers
64 views
Confirm User Account Without Exposing IP of Server?
Right now, when a user signs up for a new account on my site, the server sends the user a email verification link.
When the user clicks the verification link, the link redirects to my server to ...
1
vote
1answer
93 views
Does it make sense to configure the web server to deny obviously malicious requests?
I have a Ruby on Rails app behind Nginx. Every once in a while I see requests like GET /phpmyadmin or GET /wp-login.php. Since I don't have those tools installed, it's obvious that those are from ...
1
vote
2answers
107 views
Is there way to know what headers can be accepted by HTTP server?
Imagine that there is server required authentication for getting an access to some endpoint.
And developer added some logic to bypass the authentication: if server recieve HTTP header give_me_access=...
0
votes
1answer
99 views
Restrict web access with whitelists
Can I secure a website using a simple whitelist system?
My idea is to port forward a website www.example.com on my pc.
To secure it, I want to add a whitelist system. It will work like this:
When the ...
0
votes
1answer
49 views
How strict should I be in rejecting unexpected HTTP request parameters redux?
I read this: How strict should I be in rejecting unexpected query parameters?
Answer: No, do not error out on unexpected query string parameters.
But I just got a requirement from our security guy ...
1
vote
1answer
77 views
What is the most up-to-date secure method for storing .ENV variables?
I am improving the security on my php website. I am not using any frameworks or cms. The credentials are currently stored in plain text in the relevant php files. While researching, I came across this ...
0
votes
1answer
140 views
Changing $_SERVER['REMOTE_ADDR'] remotely
On a nginx web-server running the following config is to possible to change $_SERVER['REMOTE_ADDR'] remotely?:
user www;
pid /run/nginx.pid;
error_log /dev/stderr info;
events {
...
1
vote
1answer
64 views
Is this HSTS HTTP Response Header Misconfigured?
I recently discovered during a penetration test that the HSTS was returned by the application but in this format:
"Strict-TransportSecurity"
Instead of:
"Strict-Transport-Security"
...
0
votes
0answers
19 views
How to recover a hacked site with WSO Shell [duplicate]
Recently wordpress site on centos 7 server is hacked and WSO shell was uploaded.
Ive checked other sites and nothing was changed, Im using centos web panel and the root password also was not changed.
...
0
votes
1answer
87 views
How reverse proxy works?
I know that forward proxy can enhance security by replacing client IP's address with proxy server IP address. So, the web server or anyone else cannot identify the client identity who's requesting a ...
0
votes
1answer
82 views
Unclear attack(?) on web server: GET requests for tar files
I am currently looking at the logs of my server and it is currently targeted by an IP address in the Netherlands performing requests to routes such as /X.tar.gz, where they increment X from a to z and ...
0
votes
0answers
55 views
Confidentially seperating web content under single IP address
I am interested in exposing web content to strangers on the internet (Reddit, Discord, ..).
This content I wish to reside on the same web server under which personal web content resides.
(None of this ...
0
votes
0answers
90 views
Backendly preventing database injections on simple web forms [duplicate]
I have a simple PHP-HTML-CSS contact form which saves emails to a local email client's database (in my case, Roundcube's database, which is a standalone MySQL database, I think --- I haven't used the ...
0
votes
0answers
16 views
What does this obfuscated PHP script do? [duplicate]
I found an obfuscated PHP-script in a log directory on a shared hosting, which had been given chmod 0777 by mistake.
The script in it's original form looks like this:
$zowyb = 'i#7uH0_ls5y4m*bcrovaptf-...
1
vote
1answer
109 views
Blocking reflected XSS on common web servers
How is it possible to block reflected XSS on common web servers, such as IIS, Apache HTTP Server and Nginx?
The Content-Security-Policy: reflected-xss filter doesn't work on latest Chrome and X-XSS-...
1
vote
1answer
75 views
Best methods to mitigate DDOS with changing IP sources
Source ip addresses can be spoofed. And because of IPv6 it is not enough to keep a look-up table of ip addresses that are excluded from visiting a website, because with ipv6 there are now enough ip ...
1
vote
1answer
92 views
Can I use my HTTP/SSL certificate for mysql?
I would like to know if I can use my SSL certificates that I use on my website (based on nodejs and express) for access to mysql database remotely, or if it is better to create new certificate.
My ...
1
vote
1answer
90 views
What exploit is trying to be leveraged here? (Apache access.log)
I've just deployed a barebones Apache server on Digital Ocean, only hosting static files. No PHP et al.
I'm not too bothered to see random exploit attempts, but 99% of the requests are of this similar ...
0
votes
1answer
484 views
How do I serve a webpage on a local PC without revealing my IP-address to end users? [closed]
Are there any ways to serve a webpage locally without revealing IP to end users?
2
votes
1answer
118 views
Docker container exposed port vulnerabilities on Debian server?
I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
1
vote
1answer
67 views
Private keys with or without password for webservices?
What is the industry standard on this matter? How do you handle the keys for your websites, apis, micro-services, etc.
If I create private keys without password they will be 100% compromised if one ...
0
votes
1answer
75 views
why the website cant understand my request in http smuggling?
hi I started to find bug bounty vulnerabilities and i think i found a te.cl vulnerability in a website.
i send
GET / HTTP/1.1
Transfer-Encoding: chunked
Host: subdomain.domain.com
User-Agent: Mozilla/...
1
vote
0answers
52 views
Is it ok to give the client the power to make any request from within our server?
We have a very heavy endpoint on our server, that takes a few hours to respond. Of course, this would result in a timeout, so we added an "asynchronous" functionality to it.
To summarize, a ...
3
votes
1answer
173 views
What are these long hexadecimal HTTP requests? [closed]
I'm receiving long hexadecimal requests on my webserver, such as: /...
0
votes
1answer
73 views
TLS integration of webapplications
Let's say I am a developer/maintainer of an open-source-webapplication distributed via docker.
Any server-admin can install (using docker) and host this webapplication on his server with his own ...
4
votes
0answers
196 views
Is an out-of-band request via DNS by abusing the X-Forwarded-For header exploitable
By changing the X-Forwarded-For header in a request, I am able to have it sent an OOB interaction with Burp Collaborator requesting a DNS lookup of type A.
Is there any risk to this vulnerability or ...
1
vote
1answer
137 views
sudo systemctl running a webserver a security risk?
On linux ami the only way to easily run systemctl for my server is by running
sudo systemctl start node
In the service:
/etc/systemd/system/node.service
sudo seems to be mandatory for the 'enable',...
0
votes
1answer
84 views
How to know if the response is from the CDN and not the origin?
I am doing some bug hunting. I inserted a malicious payload into a request. But I am not sure if the response is from CloudFlare or the origin. Are there special headers which help me to distinguish ...
0
votes
0answers
56 views
Is it possible to know the keep-alive time supported by a web server?
I'm testing a web server that may be vulnerable to denial of service because of the time server keeps alive conections of the clients, I found that in a qualys report I launched against the webapp. I ...
0
votes
0answers
240 views
Strange get request to my web server [duplicate]
I recently set up a python-bottle web server for a school project to essentially open my Garage Door remotely over the internet. Recently I saw the logs had a strange get request and was wondering if ...
16
votes
1answer
6k views
Does a log entry with "SPT=81" despite nothing listening on that port indicate my server is hacked?
I manage a Debian GNU/Linux web server (Debian 10 Buster with its bundled 4.19 kernel). I put in place simple iptables logging rules a long time ago, among other things. Here they are:
# iptables -A ...
0
votes
2answers
156 views
Hijacking of my site
I have my site xyz.mysite.com this is sitting on Cloudflare. I was reviewing my Apache logs and I saw a website as a referrer I did not recognise. I went to the site and it redirected to my site xyz....
0
votes
1answer
95 views
What (aside from the law) prevents cloud-hosting owners from eavesdropping on servers/code?
Given a server hosted on a cloud platform, what would stop the cloud platform owner from stealing the server's data and/or code?
As far as I can tell, a motivated cloud owner could retrieve the data ...
1
vote
1answer
84 views
Getting an abnormal amount of firewall warnings on web server
I just had a look at the firewall status and saw it had blocked over 300 requests from TOR, Python Urllib, and some script called aabbccdd.xss.ht/pigeonburger.xyz (pigeonburger.xyz being my website).
...
1
vote
2answers
182 views
How are hidden private URLs being "leaked" to third parties?
We're hosting a web site where the server processes a stream of images, generating a unique ID (uuid) for each new picture and storing various data against the ID in a MySQL database. The site is ...
1
vote
1answer
64 views
Build and execute code on a sandboxed environment?
Numerous websites allow us to build and execute C code from web browsers (repl.it, onlinegdb.com, ideone.com...). For my own application (education purposes) I would like to do the same on my web ...
1
vote
1answer
383 views
Paths in web servers
Using sqlmap I was able to gain access to one database and using --current-user and --privileges. I can confirm that the user is root@localhost with full privileges.
The part I have problem with is ...
-2
votes
1answer
820 views
How can I fuzz a http server? [closed]
I was researching fuzzing using AFL and hongofuzz and they mainly support applications that run in the terminal. After that I came across a list of resources for network fuzzers, and found afl-net ...
3
votes
2answers
545 views
Is it safe to store data of small company in MySQL database on webhost?
A small company has a big list of customers. The list contains personal information like names, phone numbers, addresses, info (like what products bought) and some small notes. The data is stored at ...
0
votes
0answers
32 views
What are these access requests? [duplicate]
So I have a series of these requests in my log and was wondering what they were? It appears malicious but no harm has been done. Can anyone confirm? - Any insight or reading material etc that would ...
0
votes
1answer
844 views
Understanding sqlite3 sanitization in python
I use sqlite3 for my database and get data from untrusted source with
flask.request.get()
I insert all data with such syntax
c.execute("INSERT INTO table (e1, e2) VALUES(?, ?)", (V1, V2))
...
0
votes
1answer
99 views
CDN vs server-level GeoIP
Suppose a website is set up so that only IPs from country X are allowed read/write access. This server goes through a CDN such as Cloudflare.
Because the GeoIP read block is at server level, it never ...
2
votes
2answers
404 views
Does content-type header having a blank value in the response body, cause any security problem?
I have one HTTP request which is responding with no content value (No response body).
Is it necessary to have a content-type header specified for these kinds of responses?
0
votes
1answer
111 views
Where is the best way to filter user input? [duplicate]
Users can interfere with any piece of data transmitted between the client and the server, including request parameters, cookies, and HTTP headers. Where is the best way to filter user input, on the ...
0
votes
2answers
394 views
Is it safe to open a server application on the internal network to the public internet
I am a programmer but I am currently learning about web development in general. I'm creating a server on my local host using nodejs and express. It's available on my local host but I want to test it ...
0
votes
1answer
79 views
Securing application server for a single user
I'm building some simple dashboard app for myself, but I want to have them on multiple devices - hence the server and front end. As I will be the only user who will access the application server, what ...
