New answers tagged url
2
If you have no skills in malware analysis and reverse engineering, you should try Free Automated Malware Analysis Sandboxes and Services first and install a hardened Cuckoo Sandbox in a VPS to get a detailed dynamic analysis.
To do malware analysis and reverse engineering in a VM safely and effectively, you need to learn a lot from books, videos, articles ...
0
A few possibilities:
Internet Explorer doesn't automatically hex-encode characters in the query string. Up to your client whether that browser still has enough market share to matter to them.
Apostrophes (single quotes) don't get encoded in Edge, and maybe some other browsers. If there's a string you can inject into delimited by those, there you go.
...
1
I think this depends on the HTTP library that handles the requests, for example, in theory if the content of a POST message is json and the content-type is set to text/html the responsibility of give an error will be from the application (the content ins not text and is json), however depending on the HTTP library this check can be done on the HTTP library, ...
1
Let us try to answer the questions one at a time:
Is it correct that putting user passwords ..., while web applications do? Does HTTP know to look for user names and passwords or for other specifics in message bodies?
At the HTTP level, the body is an opaque stream of bytes. But it is common to use HTML form answers to give passwords for form ...
0
Your curl command.first triggers a DNS request to resolve someserver. So even if the whole will get encrypted man can still get this information.
Then a TLS tunnel is created to this server to the port you specified (5000 in your exemple). This would trigger certificate exchange and keys exchange to encrypt the HTTP request itself.
The whole HTTP protocol ...
Top 50 recent answers are included
