Questions tagged [webserver]
A system whose primary function is to deliver web pages on request to clients.
885
questions
0
votes
0answers
90 views
Strange get request to my web server [duplicate]
I recently set up a python-bottle web server for a school project to essentially open my Garage Door remotely over the internet. Recently I saw the logs had a strange get request and was wondering if ...
16
votes
1answer
6k views
Does a log entry with “SPT=81” despite nothing listening on that port indicate my server is hacked?
I manage a Debian GNU/Linux web server (Debian 10 Buster with its bundled 4.19 kernel). I put in place simple iptables logging rules a long time ago, among other things. Here they are:
# iptables -A ...
0
votes
2answers
118 views
Hijacking of my site
I have my site xyz.mysite.com this is sitting on Cloudflare. I was reviewing my Apache logs and I saw a website as a referrer I did not recognise. I went to the site and it redirected to my site xyz....
0
votes
1answer
79 views
What (aside from the law) prevents cloud-hosting owners from eavesdropping on servers/code?
Given a server hosted on a cloud platform, what would stop the cloud platform owner from stealing the server's data and/or code?
As far as I can tell, a motivated cloud owner could retrieve the data ...
1
vote
1answer
50 views
Getting an abnormal amount of firewall warnings on web server
I just had a look at the firewall status and saw it had blocked over 300 requests from TOR, Python Urllib, and some script called aabbccdd.xss.ht/pigeonburger.xyz (pigeonburger.xyz being my website).
...
1
vote
2answers
151 views
How are hidden private URLs being “leaked” to third parties?
We're hosting a web site where the server processes a stream of images, generating a unique ID (uuid) for each new picture and storing various data against the ID in a MySQL database. The site is ...
0
votes
0answers
41 views
Dreamhost hosted wordpress site attacked - SSH password was changed - Need help assesing attack vector
My client had his wordpress site attacked, his site is not a juici target, the attack consisted in redirecting the site to another site.
That in itself is no surprise, the weird thing is that both the ...
1
vote
1answer
48 views
Build and execute code on a sandboxed environment?
Numerous websites allow us to build and execute C code from web browsers (repl.it, onlinegdb.com, ideone.com...). For my own application (education purposes) I would like to do the same on my web ...
0
votes
1answer
58 views
Paths in web servers
Using sqlmap I was able to gain access to one database and using --current-user and --privileges. I can confirm that the user is root@localhost with full privileges.
The part I have problem with is ...
0
votes
0answers
8 views
Is there a utility that identifies attack footprints in HTTPD log files? [duplicate]
We're manually reading HTTPD log files and taking note of service abuse.
Example:
10.0.0.1 - - [01/Jan/1970:00:01:01 -0100] "GET /fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media
...
0
votes
0answers
37 views
How to perform encryption/decryption in a RESTful system? [duplicate]
I'm not a crypto/security expert and have designed an architecture for encryption/decryption. I'm not sure if its full proof and want to know what people use as industry standard?
I'm trying to ...
-2
votes
1answer
145 views
How can I fuzz a http server? [closed]
I was researching fuzzing using AFL and hongofuzz and they mainly support applications that run in the terminal. After that I came across a list of resources for network fuzzers, and found afl-net ...
0
votes
0answers
20 views
E2EE through a browser for multiple users and devices in a many-to-many scenario
I've multiple IoT devices that read and write streams of data (audio/video signals, sensory data, ecc...) and multiple users that can do the same, I should be able to interchange informations from one ...
2
votes
2answers
138 views
Is it safe to store data of small company in MySQL database on webhost?
A small company has a big list of customers. The list contains personal information like names, phone numbers, addresses, info (like what products bought) and some small notes. The data is stored at ...
0
votes
0answers
31 views
What are these access requests? [duplicate]
So I have a series of these requests in my log and was wondering what they were? It appears malicious but no harm has been done. Can anyone confirm? - Any insight or reading material etc that would ...
0
votes
1answer
133 views
Understanding sqlite3 sanitization in python
I use sqlite3 for my database and get data from untrusted source with
flask.request.get()
I insert all data with such syntax
c.execute("INSERT INTO table (e1, e2) VALUES(?, ?)", (V1, V2))
...
0
votes
1answer
50 views
CDN vs server-level GeoIP
Suppose a website is set up so that only IPs from country X are allowed read/write access. This server goes through a CDN such as Cloudflare.
Because the GeoIP read block is at server level, it never ...
2
votes
2answers
80 views
Does content-type header having a blank value in the response body, cause any security problem?
I have one HTTP request which is responding with no content value (No response body).
Is it necessary to have a content-type header specified for these kinds of responses?
0
votes
1answer
59 views
Where is the best way to filter user input? [duplicate]
Users can interfere with any piece of data transmitted between the client and the server, including request parameters, cookies, and HTTP headers. Where is the best way to filter user input, on the ...
0
votes
2answers
98 views
Is it safe to open a server application on the internal network to the public internet
I am a programmer but I am currently learning about web development in general. I'm creating a server on my local host using nodejs and express. It's available on my local host but I want to test it ...
0
votes
1answer
62 views
Securing application server for a single user
I'm building some simple dashboard app for myself, but I want to have them on multiple devices - hence the server and front end. As I will be the only user who will access the application server, what ...
0
votes
0answers
48 views
Hacking Attempt Requests Not showing Up on Webserver Logs But Google Analytics Shows it
Which hacking tool makes a request and does not show up on web-server logs?
/en/latest/ has been requested over 116, we don't have this URL on the website at all!
The request to that URL does not show ...
0
votes
0answers
179 views
Can someone explain the 'IE No Open' X-Download-Options Header, as enforced by Helmet.js?
I've been preparing to deploy an Express server using Helmet.js for some added security. I've been reading through their docs to make sure I understand what I am doing here, and I don't understand one ...
0
votes
1answer
106 views
using Uuid for security
I read that uuid does not bring any security advantages
But I can't find why It doesn't bring a little bit of extra security in the scenario below ?:
Consider that right now the session id is ...
2
votes
2answers
120 views
Is it safe to run a flask server in a development environment?
I have a project that I have to present on a Zoom call for my AP Computer Science class. I have a flask site that I am running off of my laptop onto a port forward. When I run the server it says:
...
1
vote
1answer
57 views
Security risks by hosting a Nextcloud on home PC via virtual server
I found this question I want to host a server from my home computer; safe? that indicates that hosting anything connected to the open web on a private is a great security risk. As I am totally new to ...
2
votes
2answers
119 views
How to protect web server private keys on Ubuntu with Nginx without exposing any plain text credentials?
I'm developing a set of internal websites and services for a customer who has high levels of bureaucracy and strict formal rules about many things, one of them being "not storing passwords in plain ...
0
votes
1answer
95 views
What does the following lines of code mean? Can anyone explain step by step? [closed]
I'm still learning and this was a part of using systemctl for privilege escalation.
eop=$(mktemp).service
echo '[Service]
ExecStart=/bin/sh -c "cat /root/root.txt > /tmp/output"
[Install]
...
1
vote
1answer
139 views
What is the best file permission for .user.ini in hosting folder?
My hoster placed a .user.ini in my public_html. What is the recommended file permission be? Now it's 644.
0
votes
2answers
140 views
How to detect malicious files or web shell on a vps web server
How is it possible to detect malicious files or web shell on a vps web server?
I used to use a shared hosting, and when I tried to upload any malicious code for testing it got deleted automatically. ...
1
vote
3answers
88 views
Can DirBuster list all website links or information displayed on a static website?
I am in the process of looking for a specific keyword on a particularly large website with lots of pages. I'm thinking I'd have better luck if I have a way to see the links within the website. If I ...
1
vote
1answer
79 views
Help Prevent Videos From Being Downloaded or Hotlinked ~ OpenLiteSpeed Server
How do I protect videos on my server from being downloaded or hotlinked on a different site but accessible on/by one website only. I'm open to utilizing any integration either via .HTACCESS or CORS
...
0
votes
0answers
35 views
How does authentication and certificate exchange occur when connecting to a website and how is the trust verification performed? [duplicate]
I'm learning PKI infrastructure but i have some questions that my teacher don't respond.
Thank you for the possible answers.
1
vote
1answer
129 views
Why is my web site being scanned for license.txt, and should I be worried?
Lately I am seeing multiple daily 404s for variations of "license.txt", e.g., "wordpress/license.txt", "blog/license.txt", "old/license.txt", "new/license.txt". Here's a little snippet of slightly ...
0
votes
3answers
114 views
shifting PHP files to .TXT output
Is it theoretically possible to transform PHP files to raw plaintext?
I can add the .txt after the server-side programming language extension, but if it is rendered in the wrong content-type, is it ...
1
vote
1answer
528 views
There seems to have been an attempt to attack my website [duplicate]
I am using PHP as a server side language. And I don't use CMS or Framework. From the nginx log the website attack seems obvious.
I wonder what kind of attack the attacker attempted.
The attacker ...
0
votes
0answers
70 views
Can you use a domain to forward web traffic at DNS to another domain but still use the MX record for this domain
What I am attempting to do is ensure all ingress web traffic [http(s)] to exampledomain1.com forwards to exampledomain2.com but I still want to use the MX record of exampledomain1.com to point to at ...
1
vote
2answers
90 views
is iptable whitelisting secure enough in AWS
Suppose my app is hosted on multiple servers, within the same data center (say in AWS or DigitalOcean). To secure communication between these servers, I use iptable to whitelist each other's IP.
...
1
vote
0answers
105 views
Unknown website tries to connect to my website [duplicate]
A few minutes ago an error popped up on my error tracing app. I'm hosting a Django app which has login system.
The error says:
Invalid HTTP_HOST header: 'www.moxing.one'. You may need to add 'www....
0
votes
2answers
131 views
What are the risks of using non-ssl connection between server and (externally hosted) database?
I am building an application using AWS Lambda and using a MongoDB database hosted directly with MongoDB (Atlas). For some reason, I get an error when trying to connect via SSL and I've been working on ...
1
vote
2answers
95 views
VPN service - change of ip
Imagine I connect to example.com, change my IP address using my VPN service, and then remain on example.com in my browser. Meanwhile I open some other sites and eventually switch off my VPN service. ...
2
votes
1answer
62 views
PDF Server Side 2020
I have been gathering information on handling PDF files for web applications. Much of my research has been on displaying the files to the user.
What I want to learn here is how to properly handle the ...
1
vote
1answer
83 views
Which has to handle certificate, a website, a web server or a web application?
In web, what is a certificate issued to, a website, a web server or a web application?
Which has to handle certificate, a website, a web server or a web application?
For example, when I run a web ...
4
votes
2answers
210 views
Does Cloudflare masking my IP make my server more secure?
I've heard in a conversation and read in some forum posts that Cloudflare will proxy your IP, hiding it from the public, and this mitigates the risk of an attacker finding your server in the first ...
2
votes
1answer
749 views
Can a user hack a server running apache from a website
Is it possible that a user can hack a server running Apache httpd from the website it hosts? Let's say I have a PHP web application running under Apache with explicit user www-data in the virtual host ...
0
votes
2answers
118 views
Is it safe to publish a REST API client on npm even though the API is not intended for public use?
I am build a website in Angular which communicates over my REST API on my backend server.
I have managed to auto-generate the code (TypeScript) for my client and now I need it to be available on ...
0
votes
1answer
637 views
Strange HTTP request from binaryedge.ninja
I found the following strange HTTP request apparently emanating from binaryedge.ninja:
min-li-ustx-12-13-65991-x-prod.binaryedge.ninja - - [05/Jan/2020:07:18:48 -0500] "GET / HTTP/1.0" 302 212 "-" "-...
17
votes
3answers
4k views
What use would a privacy browser, such as Firefox Focus for iPhone, have for an internal web server?
The Mozilla Foundation has a "privacy browser" called Firefox Focus that is available for example iPhone (here). This browser has an always-on ad blocking function.
I was checking the third-party ...
0
votes
1answer
76 views
Is it a security issue that underlying infrastructure (like e.g. Kubernetes cluster) can easily be revealed?
I have recently found out that a very common setup of Kubernetes for some use cases of access over TLS returns an invalid certificate with name Kubernetes Ingress Controller Fake Certificate. I.e. ...
0
votes
2answers
234 views
Is it a security issue that Nginx returns server name in errors?
I have recently sat up an Nginx in a way that makes it not return a Server header and hide the version information from the error pages.
The error page looks like that now (and anyone can provoke it ...
