Questions tagged [webserver]

A system whose primary function is to deliver web pages on request to clients.

Filter by
Sorted by
Tagged with
4
votes
6answers
9k views

Is it dangerous to allow user to view a file directory via web browser?

I have a URL which displays all of the pdf files at a given dir by visiting the following site location : http://www.mysite.com/allpdffiles/ Does this present any security vulnerabilities?
2
votes
1answer
5k views

How to configure F5 load balancer and backend server both with SSL Certs

I have an F5 load balancer and a backend server. Load balancer is www.example.com. Backend server is server1.example.com. I have the F5 load balancer with SSL Profile (client) and SSL Profile (server) ...
0
votes
3answers
2k views

How to find out what websites are associated with an IP that has port 80 open?

New to security, so please forgive my ignornance - I have a machine with port 80 open, and I found the following information: Starting Nmap 7.01 ( https://nmap.org ) at 2016-09-29 23:46 EDT Nmap scan ...
1
vote
2answers
435 views

Replacing a TLS cert when the old one is pinned (HPKP)

Suppose my Public-Key-Pins max-age is 60 days. When can I deploy a new cert? 60 days from now? But what about browsers who first connect to my site between now and 60 days from now? This site says: ...
2
votes
3answers
1k views

Does a reverse proxy pass keep the backend server anonymous?

If I have an NGINX server at 1.1.1.1 and in the NGINX server you have the config that forwards on http traffic to 2.2.2.2: upstream 123 { server 2.2.2.2; } server { listen 80 default_server; ...
0
votes
4answers
107 views

Is there any security flaw in using a non root port in production?

I am planning to use a web service running on port 8080 for serving some static files in production . Is it acceptable or is there any possible security flaw in this? NOTE- I don't want this service ...
7
votes
3answers
10k views

Is there any way to block LD_PRELOAD and LD_LIBRARY_PATH on Linux?

Preferably with a vanilla Linux kernel i.e. not using SELinux or GrSecurity? Lately there has been a case of in-the-wild UNIX server malware: https://www.virusbtn.com/virusbulletin/archive/2014/07/...
2
votes
1answer
669 views

Securing elasticsearch behind a reverse proxy

I intend to run an Elasticsearch index to store a persistent copy of data retrieved from an external service. My plan is to host the Elasticsearch index on AWS, and have it listen on 127.0.0.1 only. I ...
2
votes
2answers
710 views

Odd url showing up in my pubsub stream, should I be concerned?

Background: Yesterday I started working on a simple metrics dashboard. I have a VBScript on my internal network that queries a database over a VPN from our Vendor. I then do a simple HTTP post to a ...
4
votes
2answers
15k views

Should I use websockets (ws) or secure websockets (wss) for my game?

I'm making a game and I'm using websockets for 99% of communication. The only http(s) is on initial page load and when logging in/registering. I'm a complete noob so correct me if I'm wrong, but SSL ...
1
vote
2answers
772 views

How to specify virtual web hosts in Nessus (host header/SNI)

Say I have the web server 198.51.100.125 in Amazon cloud that I want to scan, which is hosting two domains example.com and example.org. In Nessus, I have configured the targets like so: 198.51.100....
-1
votes
1answer
158 views

Weird GET request to /proxychecker/check.cgi [duplicate]

I started running a flask application on a raspberry pi last night. It was not hiding behind apache or nginx, served the requests by itself. I set up my router to forward http traffic towards it as ...
12
votes
1answer
9k views

Why does Directory traversal attack %C0%AF work?

Introduction: I am trying to learn the basics of Directory Traversal. Question: While trying to understand the 2-Byte Unicode conversion of characters, I came across this_SANS ARTICLE that explains ...
2
votes
1answer
692 views

What network topology should be used in a SOHO environment with a publicly available web server?

My home office setup currently has a wireless router running DD-WRT NXT connected to a cable modem. Connected to this router are a number of workstations which I do not have to deal with that I assume ...
-1
votes
2answers
149 views

Got this php file in my webserver root. Am I attacked? [duplicate]

The name of the file is dmpdstcm_qsdfjmqsjfdlmqjf.php and its content is below. What should I do please? :( <?php $brian= 'r';$exhaling ='ctpv'; $jacki= 'b'; $cravat = 'am('; $giselbert = 'LkRi"...
3
votes
3answers
7k views

I want to host a server from my home computer; safe?

I am planning to make public a website I have been working on; it seems to me that (in my very limited experience) the only way I can do this without needing to pay any extra money to external hosts ...
20
votes
6answers
39k views

What is the best practice for placing database servers in secure network topologies

I have a classic DMZ architecture: My webserver is placed in the DMZ. The webserver needs to communicate with a database server. This database server is the most critical component of my network as ...
1
vote
1answer
252 views

Executing XSS on .jsp page by escaping string and with raw bytecode?

Assume that a java (.jsp) page takes a from input as a string, the server does nothing to sanitize it, and then echoes it back to the user. How would an attacker escape the string to execute ...
1
vote
3answers
16k views

htaccess - protect php file execution in specific directory

How can I protect php execution in specific upload directory? Mostly, people put .htaccess in upload folder to protect php execution. But someone says it can be replaced by attackers. So how can I ...
1
vote
1answer
69 views

Does a continuously freshly installed proxy server increase security?

If a small number of physical servers are used to run an OS and reverse proxy purely in RAM and have no storage, and they are rebooted/re-initiated in relay every X minutes - so that changes to the ...
4
votes
2answers
1k views

Attack surface for a site that hosts only static content HTML and images?

What kind of attack surface is there for a site that only hosts static content: HTML, images, CSS? How can sites like this be successfully penetrated?
0
votes
1answer
435 views

Parse logs from router to database

I would like to parse log files from Cisco WRVS4400N router to a specific database for detecting a DoS Attack. Any idea please?
6
votes
2answers
183 views

Understanding an attempt to exploit a webserver

Given an attacker connects to a web server on port 80 and issues following command, what is he trying to accomplish? /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0 I already read this is related to some ...
3
votes
2answers
585 views

Can web server have TLS version specific cipher suite configuration?

For eg. TLS 1.1 only RC4 suites, TLS 1.2 only GCM suites etc Also, Can it have Different cipher suite preference order (i.e. different order for different version)? eg. RC4 on top of list for SSL 3 ...
10
votes
4answers
12k views

What are the disadvantages of Tor?

I've just started using Tor recently, and I'm not sure exactly what security issues come with the benefits. What should/shouldn't I be worried about (in both everyday normal-web browsing use, in ...
1
vote
0answers
172 views

Bizarre HTTP requests to VPS, former malware command and control server?

I just bought a new VPS with Linode. I installed Apache and noticed some very strange behavior that I have been seeing consistently throughout the logs. So basically, I keep receiving stranger HTTP ...
4
votes
1answer
761 views

Does visiting the localhost with my Tor browser reduce my security?

I happen to have Tor open right now, and want to do a quick modification to my website. Does visiting localhost with Tor reduce the security of that session?
3
votes
1answer
1k views

How can a server be hacked apart from port 80 or SSH?

Currently I have a compromised server (Ubuntu) that is running all services in Docker containers, but I found today a malicious program that was generating a DDOS attack. I checked all services in ...
47
votes
9answers
6k views

Hack-resistant hosting solution for non-profit?

(While the answers and comments at How do I deal with a compromised server? are useful, my question is more about prevention of hacking when I do not have total (or much) control over the server. I ...
4
votes
3answers
199 views

Single web application - security advantages to two server model?

I'm looking to deploy infrastructure for a web application that will live on a LAMP stack. The infrastructure is such that this is the only application that will ever live on this server and it must ...
8
votes
5answers
2k views

Securing Debian Apache PHP server

I have a Debian Apache PHP server. I want to secure it after the classic installation process. My usual steps are : list items update all packages remove all unnecessary services like named, ...
3
votes
4answers
343 views

Why there are so many web servers which get exploited by generating obfuscated files?

TL & DR How do those obfuscated files many users complain on this SE-site about get on their systems? And after that, even more interesting how they get executed? Is this caused by the way php ...
0
votes
1answer
702 views

Protect files on webserver, allow only internal use

I have a website and it has an audio player to play music files. The music files are hosted in a public directory. Since they are there anyome can point there and use the files on their website. Is ...
1
vote
1answer
46 views

On a Linux server, is it safe to store a script containing DBI credentials in the cgi-bin of the DocumentRoot?

I understand that (at least on Linux servers) the custom is to create a ScriptAlias from a cgi-bin directory located inside the DocumentRoot (i.e. /var/www/html/cgi-bin/) to a cgi-bin directory ...
2
votes
3answers
114 views

Should public access to specific filenames and -types be denied preventively?

Is it a good idea to preventively disable (public) access to certain filetypes (by extension) and/or by filenames: in the server configuration (in case of a shared hosting server) or, as a rewrite ...
4
votes
2answers
2k views

Managing and deploying web app passwords

What are some best practices for managing and deploying web app passwords and private keys? E.g. the password to access a database or external services like the Facebook API. I'm referring generally ...
4
votes
2answers
149 views

Server side Excel file security

I need to write an application that will interact with files uploaded from untrusted sources (users). Specs say I must support CSV and Excel. If I allow a user to upload an Excel file to the server ...
4
votes
3answers
11k views

AD User vs SQL User for SQL Server Authentication

My company has multiple web applications that we deploy to customer sites. Often the customer has the final say in deployment options in which often it shocks me. Many of these customers are ...
0
votes
1answer
136 views

How come domain resolves to another IP?

I tried to ping http://crashsafari.com in my CMD: Right there, it resolves http://crashsafari.com to 54.231.48.170 which is http://s3-website-us-east-1.amazonaws.com. But, http://crashsafari.com ...
1
vote
2answers
13k views

Path traversal exploit

I have an Apache server which seems to be vulnerable to path traversal, because when I test this URL: http://localhost/ati/../test.txt it will be changed to the this: http://localhost/test.txt and ...
5
votes
2answers
350 views

Is an application backend expected to potentially log sensitive customer data when in debug mode?

As I am working on a website that asks customers to enter data such as their name, address, phone number, obviously customer data that needs to be protected. I do my best to not log such data (...
5
votes
2answers
1k views

How can someone upload a PHP file to a server without an upload form?

I was entrusted with an existed website for which I should do some changes on the design part, but when I was about to access it, i've seen that it has been compromised. When I was searching for the ...
52
votes
4answers
72k views

Strange requests to web server

I have a Linode VPS running Nginx, which currently serves only static content. Once I was looking at the log and noticed some strange requests: XXX.193.171.202 - - [07/Aug/2013:14:04:36 +0400] "GET /...
32
votes
1answer
4k views

Server attack with \x01

I notice from my server logs that there have been a number of requests like [01/Jun/2016:07:47:58 +0000] "\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\...
2
votes
3answers
67 views

How secure are webservers from linux repos?

how secure are Webserver like Apache2 or Nginx on a current linux, e.g. Debian, when downloaded from a repo of this distro? Of course, they have to configured correct and must be up to date. If they ...
0
votes
1answer
61 views

Finding the cipher suites supported by a web server [closed]

So I need to find the cipher suites supported by a website. Now I can use this NMap script however this problem is research oriented so I need to write a code in order to collect the data ...
0
votes
0answers
149 views

shared hosted web server used as forward proxy

When setting up personal anonymous forward proxy server, different hosting can be chosen. In the case of shared hosting, web server, transformed into proxy server, shares it's IP with hundreds of ...
0
votes
1answer
114 views

Connected to my server through VPN. Should I change my key?

I am using an SSH key to connect to my server (I've got Pageant to authenticate my key) and I forgot that I had the VPN on so I connected to the server (SFTP) while I was on it. Should I change my ...
3
votes
2answers
2k views

Has a HTTP server access to SSL session ID?

I want to know if a HTTP server (Apache, nginx etc.) can access a SSL/TLS session ID. Assume we have some hardware which does only SSL/TLS and behind a webserver which sends and receives the requests. ...
41
votes
6answers
12k views

PHP files browsable: is this a vulnerability?

I have a friend who has a website developed in PHP on which we can browse all his files one after one (of course, we can not read the content of the PHP files). Do you think this is a security hole? ...