Questions tagged [whitelist]
A whitelist shows data that specifically is allowed. All other data (not on the whitelist) will be filtered out or ignored. A whitelist is the opposite of a blacklist. - Whitelist - only these things. - Blacklist - everything but these things.
76 questions
2
votes
0
answers
19
views
Whitelisting too large a range of IPs for SFTP [closed]
In my company, we use a certain SaaS service from a big technology company and we need to connect this SaaS to our SFTP server in order to use some data from an external data provider.
This SFTP has ...
0
votes
1
answer
66
views
Whitelist at network level, application level, or both?
I have a public-facing SFTP instance. When applying the whitelist/allow-list of IP addresses that are allowed to connect to this instance, should I enforce the list on the network/firewall level, the ...
0
votes
1
answer
795
views
Bypass IP Whitelist Restrictions
I have an internal application that only allow whitelisted IP address to consume the API.
I have tried:
X-Forwarded-For, X-Originating-IP etc. in the headers.
None of them work.
However, with header ...
- 111
0
votes
2
answers
139
views
Is it possible to make whitelisted software do custom, malicious things?
Let's say there's a keylogger secretly installed in an employee's computer. The keylogger recorded a bunch of information, but the well-configured firewall blocked the keylogger from sending that ...
- 227
1
vote
2
answers
302
views
SQL injection using “True” or “Null”
In a discussion about sql injections, a claim was made that the actress Rachel True has computer problems due to her last name, including not being able to get an iCloud account, and not being able to ...
- 2,727
1
vote
2
answers
376
views
Does a database with pre-calculated SHA256 values exist for Windows EXEs?
Background: At my place of work, we're trying to block all unapproved browsers on all Windows machines and the IT Security guys did a search on our internal infrastructure and came up with a list of ...
- 123
0
votes
1
answer
164
views
Query on best practice - using 2FA to self-authorise IP addresses in an allow-list
I want to know whether a solution I'm considering for a web app is particularly secure / in line with best practices etc.
Scenario - a web application, it's a stock management app for small retailers. ...
2
votes
0
answers
328
views
What is the most efficient way to get new executables whitelisted by Norton? [closed]
We developed an application (see https://embeetle.com). To avoid false positives, all our executables and DLLs are code-signed with an Extended Verification Code Signing Certificate from Sectigo. ...
- 121
0
votes
1
answer
141
views
How to get my exploit script served on arbitrary subdomain?
Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the ...
- 34.4k
0
votes
1
answer
435
views
Is an IP based whitelist practical for controlling internet use?
I have to set up internet controls for our schools study hall/testing center. The idea is that computers on that network should only be able to access the school's webportal and learning platform ...
- 113
0
votes
1
answer
470
views
Restrict web access with whitelists
Can I secure a website using a simple whitelist system?
My idea is to port forward a website www.example.com on my pc.
To secure it, I want to add a whitelist system. It will work like this:
When the ...
- 1
7
votes
1
answer
669
views
Is it safe to allow CSS filter: url(data:<SVG SOURCE HERE>)?
We have a web service where logged in users can create web page content and write custom CSS for their pages. All the HTML goes through a whitelist parser and doesn't allow any executable content. All ...
0
votes
0
answers
148
views
Whitelisting our app to prevent connection blocking?
We publish a Windows desktop app, and while I've run VirusTotal on all of our files with no hits, some security software blocks incoming connections on ports we use, leading to frequent user support ...
- 101
3
votes
2
answers
3k
views
Risks associated with IP whitelisting
I was told that IP whitelisting should not be considered safe and are hence obsolete.
I fail to understand why this statement holds: can IPs be impersonated? if not, then why is it a bad/obsolete way ...
- 133
0
votes
4
answers
271
views
HTTP access from a single IP [closed]
If I were to configure a server that would be configured to only be accessible (HTTP) from a single IP address via a port, is it safe from unauthorized access?
1
vote
1
answer
406
views
Modsecurity CRS how to deal with field arrays
I have a question how to deal with whitelisting field arrays in modsecurity. Currently am doing the following:
... ctl:ruleRemoveTargetById=942510;ARGS:_owc_pdc_faq_group[0][pdc_faq_answer]"
... ...
- 11
1
vote
2
answers
3k
views
How to allow access from just one IP in htaccess
I have a public hosting server. I want to give access to it only from one specific IP address. Since it's a public hosting I don't have access to its infrastructure or apache configuration. I can ...
- 111
2
votes
1
answer
184
views
As a Software Industry Editor, how to avoid my software being quarantined?
I'm a well established software company. For more than 30 years, my business has been delivering both hardware and software.
My Windows software is being quarantined by some of my customer's ...
- 121
2
votes
2
answers
1k
views
Why does Portswigger's solution to the lab "SSRF with whitelist-based input filter" work?
The URL with the exercise is: https://portswigger.net/web-security/ssrf/lab-ssrf-with-whitelist-filter
The solution is:
http://localhost:80%[email protected]/admin/delete?username=carlos
A ...
1
vote
2
answers
1k
views
The security of IP whitelisting large ranges
I am not a network expert but; a recent conversation has come up with a client asking to whitelist a range of ip's (let's say 250 odd for now) to transfer their data to us for processing.
I should ...
2
votes
1
answer
3k
views
Firejail Blacklist/Whitelist Priorities
I have defined the following:
whitelist /home/user/.mozilla/firefox/
noblacklist /home/user/.mozilla/firefox/
blacklist /home
However I get:
ls: cannot access '/home/user/.mozilla/firefox': ...
- 31
0
votes
1
answer
324
views
Whitelist Simulated phishing landing page
We are running a simulated phishing campaign and one of the landing pages has been blacklisted by google. If you try to visit it in chrome you get the big, red warning page "Deceptive site ahead" (...
- 99
2
votes
4
answers
3k
views
What are the benefits of using IP whitelists to secure cloud servers/resources?
Consider the following scenario:
There is a "server" (e.g. database, API, etc) that is "in the cloud" (i.e. hosted on physical hardware that is physically distant from the clients and reachable only ...
2
votes
2
answers
2k
views
Is IP whitelisting safe enough for a HTTP Basic protected service available on the internet?
We are discussing about making available through the internet one of our microservices deployed on a public cloud on Kubernetes. This ms offers some sensitive information to the clients.
This ...
- 217
1
vote
1
answer
267
views
On-site Whitelisting vs. Off-site Cisco VPN
A company I’m applying to as web software tester is requiring me to be on-site so they could put me on their whitelist. However, I had a previous job which allowed me to work anywhere, using only ...
- 13
1
vote
2
answers
1k
views
IP-whitelisting for DB access, does solution fit best practices?
All the data we have on our customers sits in our data-lake, which is hosted by one of our suppliers. Currently the security is such that a limited number of users has (limited) access to the database ...
- 89
2
votes
1
answer
303
views
What port state to expect from Nmap when scanning ports that are open only to specific IP addresses
My firewall has a few ports open but traffic is only forwarded when coming from specific IP addresses (whitelisted).
When scanning these ports with nmap from a non whitelisted IP address, what state ...
8
votes
2
answers
4k
views
Could an attacker spoof a whitelisted IP to access the network?
There is a network that is protected with a firewall and only one IP is whitelisted.
Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
- 81
2
votes
0
answers
1k
views
How to check if direct debit whitelisting is in place for a specific account number? [closed]
Paying through bank transfer to other account without direct debit is more and more common these days.
Some of them are online services running bug bounties with availability of payment through bank ...
- 1,492
0
votes
0
answers
122
views
When using Symantec security, is our IP address our own or shared, should we whitelist?
The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec.
My question is, do other companies that are also ...
- 89
0
votes
1
answer
123
views
Whitelist outbound mail [closed]
Is there a way to limit the list of mailadresses a user can send mail to, to a small whitelist of approved addresses?
The only option I can think of right now is a customized contact form, but I'm ...
user164453
1
vote
1
answer
152
views
domain names with email whitelisting
We have white-listed full domains and that creates uncertainty i.e. myservice.com
Anyone can send spam mails and we can't block it.
We have white-listed specific emails / IP addresses and there is ...
- 103
1
vote
1
answer
754
views
Whitelist Application For Windows Server 2012
My problem
I am looking for an application which runs on Windows Server 2012 for security reasons. Our server began attacked on many protocols. They are trying brute force attacks with very weak ...
- 7
5
votes
1
answer
266
views
Why should class names be whitelisted?
I am using the Accept known good validation strategy to sanitize user input (rich HTML) and are using a 3rd party component to do this.
The component by default requires every permitted class name to ...
- 774
6
votes
2
answers
2k
views
Is SSH public key authentication sufficient for protecting a server if IP Whitelisting is disabled?
I'm currently working for a startup company who maintains a server on AWS. Currently, our server is set up so that in order to access it via SSH, you need to be on a white listed IP (set up in AWS) ...
0
votes
2
answers
566
views
Has there ever been a country that implemented whitelist-based internet censorship?
We hear time and time again of countries censoring internet traffic by blocking IP Ranges.
Without getting into the politics of it, let's take for example China's Great Firewall. Even though it is ...
- 1
1
vote
2
answers
353
views
How safe I am without antivirus on Windows 7 with restricted security policy enabled?
I've Windows 7 with latest updates without any antivirus software.
I use ZoneAlaram Free Firewall to restrict application from accessing Internet without my knowledge (every new application requires ...
- 123
1
vote
1
answer
2k
views
Difference between Knowledge-based IDS and behavior-based IDS
I have difficulties in understanding the difference between Knowledge-based IDS and behavior-based IDS.
This link says that a knowledge-based IDS uses a database of specific attacks and system ...
- 203
4
votes
1
answer
5k
views
How do I setup SELinux to act a as a true whitelisting solution?
I am working on an appliance device running Linux. I would like to utilize the work done so far with the targeted policy in SELinux space. Since I own everything that should be installed and running ...
- 41
0
votes
1
answer
193
views
Network Defense- White listing IPs/Ports
If I had a typical home user machine (google, email, youtube, no ssh/ftp, etc...) that had a dynamic iptables white-list that was dynamically updated with IP addresses that have been legitimately been ...
- 93
1
vote
3
answers
254
views
If LDAP credentials are leaked, is IP whitelist still sufficient protection?
In a situation where LDAP credentials get leaked but there is still an IP whitelist in place...
My gut feeling says this isn't right; the credentials should be changed. Is this correct? What ...
- 115
1
vote
2
answers
5k
views
Whitelisting only particular hosts on Windows 10
There is a laptop which is to be secured and only certain websites should be accessible.
Reason is possible data theft by user or malware, from vpn-only-accessible websites which this laptop will be ...
user119076
0
votes
4
answers
344
views
Are there tools that can prompt the user every time an executable uses system functions?
As a programmer I don't use anti-virus programs for a simple reason: I found that viruses are only detected once the executable or a part thereof has been explicitly blacklisted by the anti-virus ...
- 1,029
2
votes
2
answers
2k
views
Limit web-browsing to list of known well-known websites (whitelist)
I'd like to limit web-browsing to number of websites owned by known internet companies, for example:
Google Websites
Microsoft Websites
Amazon
Yahoo
Ebay
News
Etc
I understand I can't do it myself ...
- 73
3
votes
1
answer
1k
views
What resources/organizations should we submit applications to for testing, to prevent Anti-Virus "False-Positives?"
A friend's company just released an application recently, which received a false-positive warning with Norton AV from a client.
He found something on Norton's website that I believe he said was a ...
- 907
3
votes
2
answers
8k
views
CORS REST API whitelist
I have a REST API. I want to use this API from multiple web applications. I want to only allow requests from Whitelisted clients. My first point of call would be to add the necessary headers to the ...
- 133
1
vote
3
answers
2k
views
When is IP blocking OSI level 7 only and what is the purpose of doing so on multiple locations?
Let's say there is an application that has IP whitelisting, all other IP's are denied. This check takes place on three different locations:
iptables,
.htaccess,
PHP script.
Now in what OSI layers ...
- 7,075
1
vote
2
answers
5k
views
How effective is MAC whitelisting on a Wireless Access Point? [duplicate]
For the sake of context, let's say I set up my home router with WPA2, a strong passphrase and I whitelisted all of my devices.
I know the data is encrypted, but is the layer 2 header encrypted as ...
- 392
3
votes
1
answer
690
views
Application Whitelisting Approaches/Options on non-Enterprise Windows PCs
For a while now I've been kicking around the idea of implementing application whitelisting on a few sets of machines (owned by 2-3 different consulting clients) I administer that seem suitable for it. ...
- 2,815
-2
votes
1
answer
298
views
Why not just blacklist every IP except yours?
Inspired as a continuation of this question:
Is it practical to pre-blacklist certain GeoIP regions?
Why would it not make sense to blacklist every single IP address that shouldn't have access to a ...
- 121