Collaborate Disseminate
I recently built a Downloads Manager that will debut though before I do so I want to know what file extensions I should explicitly disallow from being accepted?
Running LAMP/WAMP the most obvious I’ve come up with since the … Continue reading File extensions that should NOT be allowed to be uploaded
I’m trying to bypass a basic HTTP authentication, but all the methods I have found are with dictionaries or with brute force.
I want to know if I can use other techniques like SQL injection or other types.
The server I… Continue reading HTTP Basic authentication bypass [on hold]
This question already has an answer here:
I have a VPS server with Windows 2016 Server and use XAMPP as Apache Server. Yesterday I receied too many requests from 1-2 IPs. How can I detect how many requests I get per 10 seconds and block them?
I need to intercept log messages from Apache (used as reverse proxy and authentication gateway). In order to do this reliably, I want to use a CustomLogs configuration to run a python script. This is not too complicated. I un… Continue reading SElinux blocks rotatelogs when called from an intermediate script
We have a legacy application on spring mvc and we have a web service exposed (SOAP protocol) for some reporting client app. This service was tested by a security team and the report indicates that the service is vulnerable to XSS attack. T… Continue reading Avoid cross site scripting in XML namespace
I’m running an application hosted on Firebase and did some tests using SlowHTTPTest. For SLOW HEADERS, SLOW BODY, and SLOW READ the output is quite similar, i.e. the service is available which makes me happy. At least, I unde… Continue reading How to read SlowHTTPTest range attack when Nginx is the server?
I do a pentest for a private server protected by Cloudflare. I bypassed the WAF and got the real IP for the server, then I scanned it with Acunetix and I found:
Apache Struts2 Remote Command Execution (S2-052)
> POST /ar/… Continue reading apache struts 2 s2-057 does not return shell? [on hold]
I would like to be able to decrypt my server’s https traffic for debugging and analysis. My server is a debian 9 Apache2 server running mod_wsgi and django.
I have seen this post:
Extract pre-master keys from an OpenSSL appl… Continue reading Extracting openssl pre-master secret from apache2
Let’s say I create a website (with apache for example) and my php pages get some sensitive information from a file on disk (a .ini file, a SQLite db or whatever).
I thought two ways to prevent users from getting to this info… Continue reading Is there any good reason to move files outside webserver document root?
On Monday, a former Amazon employee was arrested and charged with stealing more than 100 million consumer applications for credit from Capital One. Since then, many have speculated the breach was perhaps the result of a previously unknown “zero-day” flaw, or an “insider” attack in which the accused took advantage of access surreptitiously obtained from her former employer. But new information indicates the methods she deployed have been well understood for years. Continue reading What We Can Learn from the Capital One Hack