Questions tagged [webserver]

A system whose primary function is to deliver web pages on request to clients.

Filter by
Sorted by
Tagged with
0
votes
1answer
64 views

TLS integration of webapplications

Let's say I am a developer/maintainer of an open-source-webapplication distributed via docker. Any server-admin can install (using docker) and host this webapplication on his server with his own ...
0
votes
2answers
1k views

Place database in the DMZ and in the internal network

Is it sufficient to have single database inside the DMZ which the webservers in the DMZ receives their data from. Or if setup with two databases is a better solution, that would be to have a ...
0
votes
2answers
2k views

How to detect XSS in GET requests?

How to detect XSS in HTTP/1.1 GET requests? A request can be malicious and I want to know how to detect if the GET request to a server is trying to XSS my website?
0
votes
1answer
89 views

Is it a risk running old modules on Apache?

I just saw that my hoster is running extremly old modules on Apache. The cURL Version is 3 years old, the SQLLite is from the 24th October 2014 and the zlib version is 1.2.8 instead of 1.2.11. Also, ...
-1
votes
3answers
303 views

Is a web application firewall enough to defend against sql injection? or should I use prepared statements?

Is it enough to rely on a web application firewall for protection against SQL injection? or should I use other techniques? During a conversation with a friend he said it is enough to use web ...
-1
votes
4answers
140 views

Can SSL deployment incur performance issues [closed]

Does SSL deployment for secure server-client communication incur any performance overhead? I ask myself, why not just use HTTPS for standard web browsing when it is proven that it protects our privacy?...
-1
votes
2answers
163 views

Got this php file in my webserver root. Am I attacked? [duplicate]

The name of the file is dmpdstcm_qsdfjmqsjfdlmqjf.php and its content is below. What should I do please? :( <?php $brian= 'r';$exhaling ='ctpv'; $jacki= 'b'; $cravat = 'am('; $giselbert = 'LkRi"...
-1
votes
4answers
175 views

Is 'content validation' the golden rule to avoid all web attacks and breaches?

I'm new to web programming and am really upset about the security precautions that should be taken into account while launching a website.If I plan to read analyze and learn every security threats ...
-1
votes
1answer
233 views

Have i been phished? [closed]

I recently opened a link from a "friend", while I was on my workplace. It was some really simple stupid game "Super Mario" type. I opened it, played for 10 seconds and closed the link. What felt ...
-1
votes
2answers
616 views

How to restrict web access to certain countries

What are the better ways of filtering access to the web application based on Geographical location. Is it possible with a network layer firewall or we need an application layer?
-1
votes
1answer
937 views

Obfuscated PHP code found on Wordpress site - has it been compromised? [duplicate]

Firstly - I expect the answer to be yes. But I never dealt with something like this so I would like some advice. A client has recently complained that their website went down. So I started ...
-1
votes
1answer
250 views

Attempting SQLi against website with WAF filter [closed]

I was pentesting a website when I discovered that the URL included the id parameter. Because of this, I knew that the id parameter might be vulnerable to SQLi. I received a 200 response and found no ...
-1
votes
1answer
336 views

Secure version of httpd package [closed]

I am using Linux xyz.co 3.10.0-514.21.1.el7.x86_64 #1 SMP x86_64 x86_64 x86_64 GNU/Linux Tried to install latest version of httpd which is 2.4.33. But it is not available for RHEL7. That's why I ...
-1
votes
1answer
211 views

setting up website for logged in users, anyone, and files no one should see (via the web) [closed]

I asked how to prevent not logged in users from seeing certain content but the solution I chose to implement encountered a problem. I chose to make my root directory for the server C:\WAMP\www\public ...
-1
votes
1answer
39 views

If I send request with PUT, and server return valid page with 403 status. This is correct work? [closed]

I send PUT. Server returned 301 status to valid http-address(!), but next response 403 status to hhtp-address. If I copy/paste this address all works correct. Please, say me: this is correct response ...
-1
votes
1answer
107 views

If a site has no input then can it be hackable? [closed]

If I made a website without any input box can Hackers still hack my site?
-1
votes
3answers
577 views

Can Tor Browser prevent ISP or IT Department at a Work place from knowing what i do while watching a Video online from a work computer (not mine)? [duplicate]

I must change the security settings of Tor browser to the lowest to be able to play a Video online, yet i have not tried it till now. That is why i got to think, whether it is unsafe to play online ...
-1
votes
1answer
179 views

Weird GET request to /proxychecker/check.cgi [duplicate]

I started running a flask application on a raspberry pi last night. It was not hiding behind apache or nginx, served the requests by itself. I set up my router to forward http traffic towards it as ...
-1
votes
2answers
454 views

webshell on webserver, but what does it contain/do? [closed]

Found this webshell but I can not get the plain text as I have not the secret/password to decode it completely. This is the part where I am missing some information: md5($_POST['_f__f']) Does ...
-1
votes
1answer
343 views

retrieve database data with application server? [closed]

retrieve database data with application server?
-1
votes
1answer
334 views

How bad is to buy domain name with .ext from another country even if they allow non citizens to own one?

I'd like to purchase a domain name from a country that does not require citizenship, since they can make nice urls, they are more available and sometimes not too expensive too! But few things annoys ...
-1
votes
1answer
291 views

Impact of attack occured in Radius, DHCP and HTTP servers on VOIP?

Assume we can crash the RADIUS server in a VOIP system. What would be the impact on the confidentiality, integrity, and availability of VOIP service. What would be the impact if the same question if ...
-1
votes
2answers
121 views

How does a hacker get access to my files if he got access to another user's files on a shared server? [closed]

I host files on a shared server with Ubuntu 14.04. How does a hacker get access to my files if he got access to another user's files and how do I prevent it?
-1
votes
1answer
94 views

How to determine where an attack came from? [duplicate]

I've noticed sometimes that I'd receive very random requests coming to a live server that I'd be hosting in realtime through my log. It would usually look something like: [14/Mar/2019 02:05:36] "GET /...
-1
votes
2answers
275 views

Pure-ftpd connections from unknown IPs

I'm seeing unknown IPs in results like this in the messages log on a CentOS 6 webserver, are these IPs actually accessing the machine? Mar 13 19:11:49 server pure-ftpd: (?@some.ip.here) [INFO] New ...
-1
votes
1answer
308 views

Starting a server without SElinux or Apparmor [duplicate]

The Debian kernel that compiled for Beaglebone Black, doesn't support SElinux and Apparmor, AFAIK. I just want to know, is it safe to put a server on the internet without SElinux or Apparmor? However ...
-1
votes
1answer
389 views

Location of server affects the speed of page loading? [closed]

i live in a country but i make a website for another country's users. The web hosting company has server in both of the countries. So where should i buy? Does it affects where the server is depending ...
-1
votes
1answer
54 views

How to protect my webserver from unauthorized client applications? [duplicate]

I would like to host simple HTTP webservices and develop a web client for it (basic javascript app in the browser). any person (even without registering) shold be able to access the webservices but ...
-2
votes
3answers
3k views

What security problems are there with enabling directory listing on my webserver? [duplicate]

I want to to ensure that every file on my webserver is secured. The problems I am having right now: If you go to my website, and enter a url like mywebsite.com/img/ if there is no index page in ...
-2
votes
2answers
330 views

Burp Suite's keeps my ip safe?

I am starting to learn how to use Burp Suite, but since it is kind of (tho I know it does more) automatic way of plugging information into a website/form, should I still use proxychain/vpn to keep my ...
-2
votes
3answers
116 views

Do Mobile Device Management solutions provide a mechanism for an internal website to know what kind of device is connecting? [closed]

Is there any mechanism in mobile device management solutions that would allow a web server (for an internal, authenticated system, e.g. SharePoint) to know that a request is coming from a mobile ...
-2
votes
1answer
1k views

Backdoors and hard-coded usernames and passwords

I have been researching on computer worms that brought me to this topic of backdoors. According to my research, backdoors are malicious pieces of code that are inserted into either computers to get ...
-2
votes
1answer
131 views

How to know the vulnerabilities of my website? [closed]

My website had been hacked. Hackers were able to access my database and inject some script into my database, now although I have recovered my website but I want to protect my website from further ...
-2
votes
1answer
361 views

How can I fuzz a http server? [closed]

I was researching fuzzing using AFL and hongofuzz and they mainly support applications that run in the terminal. After that I came across a list of resources for network fuzzers, and found afl-net ...
-3
votes
2answers
594 views

How can i secure my web server [closed]

i want to secure my web-server from hackers. what are the ways for secure my web server? . I need tight security. without admin permission no one can not access or hack my web-server
-3
votes
1answer
106 views

Security concerning using Windows 7 as a web server [closed]

Can Windows 7 be used for hosting a low traffic website which only use php and mysql and nothing else, like email, file hosting, etc.
-3
votes
1answer
9k views

insecure HTTP Methods Enabled — how to control? [closed]

Here I am new to insecure HTTP Methods Enabled. The server allows HTTP methods that are considered dangerous. The following methods were enabled: PUT,DELETE Software used: Apache-tomcat-6.0.29. ...
-3
votes
2answers
456 views

Automatic robot crawler to check web pages authenticity?

Our servers seem to be commonly hacked, mostly injecting malicious codes/frames to our web pages or changing downloadable files with backdoors and so on. Is there any tool that can crawl our website ...
-3
votes
1answer
208 views

Can a VPS provider see the IP address I use when connecting? [closed]

I recently purchased a VPS. Can the provider see the IP address I use when connecting to my VPS?
-3
votes
1answer
75 views

How to keep users's files seperate from each other? [closed]

I want to create cloud storage platform that users can uploads any kind of files and download them.But I want to be sure that none will enter another people files thats why I think I need to deny ...
-3
votes
1answer
167 views

can vps be made as secure as having two dedicated server computers? [closed]

Which is a better option security wise : 1) cheaper option - vps (Iam assuming that if one particular virtual server is hacked,then still other virtual servers on that comp will be ...
-3
votes
1answer
142 views

How to determine if a website uses an internal WAF? [closed]

Is there a tool to know if a website uses a firewall?
-4
votes
1answer
248 views

How to avoid DDoS Attack [closed]

I buy my train ticket from our railway local web site. When ticket open for sale on web site then web site original traffic remain 50 (Just an example). Our railway web site is attacked by DDoS for ...
-5
votes
2answers
13k views

How can I spoof my IP address using the PHP curl function? [closed]

I want to spoof my IP address with the PHP curl function. I'm sending requests to a server with PHP curl, my IP address is $ip2, but I want the server to believe that the request is coming from $ip1. ...
-5
votes
1answer
120 views

what type of server is best for launching a vulnerable application on an Organization network? [closed]

For a demo purpose i need to install a vulnerable application and i tried using XAMP server but it opens up many ports and not safe to use it. so please recommend a server to launch a vulnerable demo ...
-8
votes
2answers
1k views

PHP injection on 777 file [closed]

Some one has modified a PHP file, which had permissions set to 777, on my VPS server. How can someone do that without administrative access to the server? What information I can give you? I know ...
-8
votes
1answer
179 views

Is this an attack [closed]

Original site: ---topbargains-com-au A fake replica: --topbargain-org How dangerous is this? Have they copied the whole database? Edit: Removed the URLs to satisfy a spam allegation Edit: The fake ...
-11
votes
1answer
660 views

Hacker problems - They stole my backups [closed]

I am facing an issue where hackers are seeking to compromise two of my servers. They succeeded in wiping out both and stealing my backups. I had off-site backups and I am back online. Nonetheless, I ...

1
14 15 16 17
18