Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [webserver]

A system whose primary function is to deliver web pages on request to clients.

7
votes
1answer
2k views

Flask debug=True exploitation

It's a well known fact that Flask's debug=True option can lead to remote code execution via werkzeug debugger capabilities and even several resources were hacked. I decided to look into it and it ...
1
vote
2answers
61 views

Parameters to check before storing data on cloud

I want suggestions regarding the storing/securing my data on cloud. I want to upload my data on cloud, so it will be safe and can be accessible from anywhere. I have around 15 GB of data which I ...
2
votes
1answer
4k views

How to configure F5 load balancer and backend server both with SSL Certs

I have an F5 load balancer and a backend server. Load balancer is www.example.com. Backend server is server1.example.com. I have the F5 load balancer with SSL Profile (client) and SSL Profile (server) ...
2
votes
1answer
306 views

Which server is responsible for “security” when ASP.NET Core Kestrel is hosted behind IIS?

I want to understand how the flow between IIS and Kestrel works with regards to security. It seems that the integration between IIS and Kestrel is that IIS just sends absolutely all that it receives ...
0
votes
3answers
1k views

How to find out what websites are associated with an IP that has port 80 open?

New to security, so please forgive my ignornance - I have a machine with port 80 open, and I found the following information: Starting Nmap 7.01 ( https://nmap.org ) at 2016-09-29 23:46 EDT Nmap scan ...
1
vote
2answers
366 views

Replacing a TLS cert when the old one is pinned (HPKP)

Suppose my Public-Key-Pins max-age is 60 days. When can I deploy a new cert? 60 days from now? But what about browsers who first connect to my site between now and 60 days from now? This site says: ...
0
votes
4answers
104 views

Is there any security flaw in using a non root port in production?

I am planning to use a web service running on port 8080 for serving some static files in production . Is it acceptable or is there any possible security flaw in this? NOTE- I don't want this service ...
3
votes
1answer
860 views

A=0 appended to web server queries

While looking through the logs for my web server, for a web site I wrote, I've noticed a lot of queries are being made twice, first as I expect then followed again within a second with 'A=0 appended ...
0
votes
0answers
86 views

Is this a Cross Site Scripting attack?

I was examining my web server log file this afternoon when I saw a couple of entries like this, which I wasn't happy about and banned the IP in iptables. 113.90.122.99 - - [20/Sep/2016:19:07:58 +0100]...
-1
votes
1answer
140 views

Weird GET request to /proxychecker/check.cgi [duplicate]

I started running a flask application on a raspberry pi last night. It was not hiding behind apache or nginx, served the requests by itself. I set up my router to forward http traffic towards it as ...
1
vote
2answers
651 views

How to specify virtual web hosts in Nessus (host header/SNI)

Say I have the web server 198.51.100.125 in Amazon cloud that I want to scan, which is hosting two domains example.com and example.org. In Nessus, I have configured the targets like so: 198.51.100....
-1
votes
2answers
146 views

Got this php file in my webserver root. Am I attacked? [duplicate]

The name of the file is dmpdstcm_qsdfjmqsjfdlmqjf.php and its content is below. What should I do please? :( <?php $brian= 'r';$exhaling ='ctpv'; $jacki= 'b'; $cravat = 'am('; $giselbert = 'LkRi"...
3
votes
3answers
5k views

I want to host a server from my home computer; safe?

I am planning to make public a website I have been working on; it seems to me that (in my very limited experience) the only way I can do this without needing to pay any extra money to external hosts ...
1
vote
1answer
209 views

Executing XSS on .jsp page by escaping string and with raw bytecode?

Assume that a java (.jsp) page takes a from input as a string, the server does nothing to sanitize it, and then echoes it back to the user. How would an attacker escape the string to execute ...
2
votes
1answer
584 views

What network topology should be used in a SOHO environment with a publicly available web server?

My home office setup currently has a wireless router running DD-WRT NXT connected to a cable modem. Connected to this router are a number of workstations which I do not have to deal with that I assume ...
1
vote
1answer
69 views

Does a continuously freshly installed proxy server increase security?

If a small number of physical servers are used to run an OS and reverse proxy purely in RAM and have no storage, and they are rebooted/re-initiated in relay every X minutes - so that changes to the ...
0
votes
1answer
347 views

Parse logs from router to database

I would like to parse log files from Cisco WRVS4400N router to a specific database for detecting a DoS Attack. Any idea please?
0
votes
0answers
62 views

Weird 404 traffic originating from all places? [duplicate]

So I have a small forum for a few friends I host. Its nothing major and shouldnt get much traffic however after inspecting my nginx logs I see that there is a lot of random traffic coming to my site ...
6
votes
2answers
168 views

Understanding an attempt to exploit a webserver

Given an attacker connects to a web server on port 80 and issues following command, what is he trying to accomplish? /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0 I already read this is related to some ...
3
votes
2answers
538 views

Can web server have TLS version specific cipher suite configuration?

For eg. TLS 1.1 only RC4 suites, TLS 1.2 only GCM suites etc Also, Can it have Different cipher suite preference order (i.e. different order for different version)? eg. RC4 on top of list for SSL 3 ...
1
vote
3answers
196 views

Does Windows “System Volume Information” folder pose a security risk in servers?

I have a Windows 10 WAMP server running, and Windows by default has a hidden folder in every partition called "System Volume Information". I can't access it because Windows denies it, but I noticed ...
1
vote
0answers
164 views

Bizarre HTTP requests to VPS, former malware command and control server?

I just bought a new VPS with Linode. I installed Apache and noticed some very strange behavior that I have been seeing consistently throughout the logs. So basically, I keep receiving stranger HTTP ...
4
votes
1answer
712 views

Does visiting the localhost with my Tor browser reduce my security?

I happen to have Tor open right now, and want to do a quick modification to my website. Does visiting localhost with Tor reduce the security of that session?
3
votes
1answer
1k views

How can a server be hacked apart from port 80 or SSH?

Currently I have a compromised server (Ubuntu) that is running all services in Docker containers, but I found today a malicious program that was generating a DDOS attack. I checked all services in ...
4
votes
3answers
192 views

Single web application - security advantages to two server model?

I'm looking to deploy infrastructure for a web application that will live on a LAMP stack. The infrastructure is such that this is the only application that will ever live on this server and it must ...
1
vote
1answer
45 views

On a Linux server, is it safe to store a script containing DBI credentials in the cgi-bin of the DocumentRoot?

I understand that (at least on Linux servers) the custom is to create a ScriptAlias from a cgi-bin directory located inside the DocumentRoot (i.e. /var/www/html/cgi-bin/) to a cgi-bin directory ...
14
votes
4answers
18k views

What website accepts only TLS 1.2 so I can verify client capability?

Is there a publicly accessible website which will only accept TLS 1.2 connections so that I can test to see if my application can successfully, securely connect to it? Background: I have an old VB....
2
votes
3answers
113 views

Should public access to specific filenames and -types be denied preventively?

Is it a good idea to preventively disable (public) access to certain filetypes (by extension) and/or by filenames: in the server configuration (in case of a shared hosting server) or, as a rewrite ...
4
votes
2answers
144 views

Server side Excel file security

I need to write an application that will interact with files uploaded from untrusted sources (users). Specs say I must support CSV and Excel. If I allow a user to upload an Excel file to the server ...
0
votes
2answers
889 views

Security scan with, or without, IP whitelisting in the firewall and isn't that introducing a weak point?

In case of an automated security scan is it more desirable to get the scanner IP addresses whitelisted in order to possibly find vulnerabilities behind the firewall, or to scan in front of/against the ...
0
votes
0answers
79 views

Apachelog with requests from University of California and RIPE [duplicate]

I have a VPS with a dedicated IP running. The only purporse of this machine is to serve a Wordpress website and to learn more about networking. I have been playing around with the machine. I got to ...
0
votes
1answer
108 views

How come domain resolves to another IP?

I tried to ping http://crashsafari.com in my CMD: Right there, it resolves http://crashsafari.com to 54.231.48.170 which is http://s3-website-us-east-1.amazonaws.com. But, http://crashsafari.com ...
5
votes
2answers
13k views

Should I use websockets (ws) or secure websockets (wss) for my game?

I'm making a game and I'm using websockets for 99% of communication. The only http(s) is on initial page load and when logging in/registering. I'm a complete noob so correct me if I'm wrong, but SSL ...
6
votes
2answers
1k views

How can someone upload a PHP file to a server without an upload form?

I was entrusted with an existed website for which I should do some changes on the design part, but when I was about to access it, i've seen that it has been compromised. When I was searching for the ...
32
votes
1answer
4k views

Server attack with \x01

I notice from my server logs that there have been a number of requests like [01/Jun/2016:07:47:58 +0000] "\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\...
29
votes
3answers
7k views

Is it practical to pre-blacklist certain GeoIP regions?

In recent events, a server I've been managing with has been under a few attacks, a risk you take when hosting a web-server. The firewall has been set up properly to only allow connections through the ...
0
votes
1answer
45 views

Finding the cipher suites supported by a web server [closed]

So I need to find the cipher suites supported by a website. Now I can use this NMap script however this problem is research oriented so I need to write a code in order to collect the data ...
3
votes
3answers
64 views

How secure are webservers from linux repos?

how secure are Webserver like Apache2 or Nginx on a current linux, e.g. Debian, when downloaded from a repo of this distro? Of course, they have to configured correct and must be up to date. If they ...
0
votes
0answers
133 views

shared hosted web server used as forward proxy

When setting up personal anonymous forward proxy server, different hosting can be chosen. In the case of shared hosting, web server, transformed into proxy server, shares it's IP with hundreds of ...
0
votes
0answers
69 views

How to block ftp password guessers in shared hosting?

Is this also possible for shared hosting to: 1.use a web software to block password guessing attempts 2.change ftp port 3.locking down access to specific source IP addresses If none of above is ...
0
votes
1answer
109 views

Connected to my server through VPN. Should I change my key?

I am using an SSH key to connect to my server (I've got Pageant to authenticate my key) and I forgot that I had the VPN on so I connected to the server (SFTP) while I was on it. Should I change my ...
0
votes
2answers
233 views

Need help to exploit php script vulnerability of a challenge

i am trying to exploit a vulnerability in a php script of the 'stop us' challenge of Wechall.net and I am not sure but I think I found the vulnerability, but now I don't know how to exploit it. I made ...
0
votes
2answers
1k views

How to detect XSS in GET requests?

How to detect XSS in HTTP/1.1 GET requests? A request can be malicious and I want to know how to detect if the GET request to a server is trying to XSS my website?
2
votes
2answers
483 views

Tracing origin of malicious PHP script

I'm looking at a Linux server running Apache + mod_php. A malicious PHP script was uploaded during the night. It's owned by the Apache user and I would think it almost certain that the script was ...
9
votes
2answers
347 views

Are there any sequences other than ../ which will be intepreted as directory traversal in *nix or Windows?

A common vulnerability is for web applications to accept a filesystem path as a request parameter, and then perform some action on the specified path. For example, retrieving a file and returning it ...
0
votes
1answer
120 views

Passwords processed on server side? [duplicate]

So while I was working on my personal project something struk me. When somebody creates an account on any web service/social media they provide their desired username and password,this is then ...
1
vote
1answer
75 views

Securely opening an insecure webserver to a single phone

I have a webserver running inside my private network and not exposed to the internet. I'd like to securely talk to this webserver from my mobile phone over the internet. However, this webserver has ...
2
votes
3answers
1k views

Does a reverse proxy pass keep the backend server anonymous?

If I have an NGINX server at 1.1.1.1 and in the NGINX server you have the config that forwards on http traffic to 2.2.2.2: upstream 123 { server 2.2.2.2; } server { listen 80 default_server; ...
3
votes
1answer
90 views

Is this information leakage dangerous?

After scanning my website with a automated tool I get this Is this dangerous, is it a vulnerability or not? If yes what can an attacker do, how to fix it?
1
vote
0answers
25 views

Information and Settings Collected from a PC Connected to a Web Server

1- What are the information and settings collected from my pc when I connect to a website server? 2- When I connect through a VPN, Could the website server detect a mismatch between my new location ...