Collaborate Disseminate
I had a file that was important submit with only the first four pages of my 84 page file. The other 84 pages submitted completely blank despite not being able to locate the file that has the double.pdf extension anywhere in my files. What… Continue reading Can you spyware cause files to be submitted with double and triple .pdf extension? [closed]
I was sent an email with attachments from an attorney in a contentious litigation matter despite him embedding the actual attachments at bottom of his email. The links didn’t open until I downloaded Outlook. I submitted exhibits for court … Continue reading If my system had been infected prior to submitting important files, could this cause a double and triple file extension and files to show up blank?k [closed]
We’re trying to secure our upload forms in PHP regarding image uploads and PDF files. For this purpose, we’re currently trying to do the following in all cases, according to our research done so far:
Check MIME type
Check file size
Scan c… Continue reading Validate File Uploads in PHP: PDFs and images
On my target site, I found two vulnerabilities, unrestricted file upload(to any directory) and directory traversal. I have two end points :
1- site.com/fileUp : uploads file
{
—-Request Parameters—
file_data=<file>
file_name=123…. Continue reading Uploading webshell in ASP.net application using directory-traversal and file-upload vulnerability
On one of the targets, I have a feature to upload files where I can upload files, but every account gets 100mb capacity.
How can I bypass the size limit to upload files more than 100 MB?
I tried race conditions.
When I try to bypass the security configuration of Natas13 (http://natas13.natas.labs.overthewire.org/ A/P:natas13/lW3jYRI02ZKDBb8VtQBU1f6eDRo6WEj9) while using Burp Suite Community Edition on Windows 10, I’ve found very confusing respons… Continue reading Does Burp Suite affect my request directly?
Having one HTTPS api which has an endpoint i.e POST data how can we prevent/check that the data received is not malicious or possibly detrimental?
To consider (please read)
POST data receives 2 payload parameters: key and data. Where key could be any valid string (even allows extension malicious.bat and data a string or multipart/form-data.GET data will return the data into a downloadable file where the file name is the key parameter and sets the Content-Type to application/octet-stream.danger.bat data: !#/bin/bat\ndb_destroy;' and when retrived, a file on name danger.bat` is downloadable.POST data from 0 in order to don’t destroy current api-clients, so in that part I am quite free but let’s say, can’t do much on the GET data.Best way and how to validate data a scan for possible Malware/virus/XSS(cross-site scripting)/ and other possible malicious content sent via HTTP through an API by client.
What are the possible dangers on letting a client create/read any type of strings into a database without check what’s the content?
With an API a client can connect to endpoint /postdata and currently accepts any Content-Type. The data can be inserted in a form-data or urlencoded base64, anytype of string or bytes. Once the the request is received in the database, there is not check, the data is only converted from a string into base64 bytes and then inserted into a database as bytes databytes, more specifically in a Cochbase database. The user also specify the name of its data with a name.
In another endpoint called /getDatathe client can retrieve that data.
So a sending client can send stuff like (as strings):
virus.html<!DOCTYPE html><html lang="en"><head></head><body><script>alert("Virus!!!!")</script></body></html>virus.bat#!/bin/bash echo "Virus";base64 if as parameter of a URL or as field in a form-data ( multipart/form-data)Also worth pointing out that once this data is in the database, is not proccessed or used, but only released to the client when it requests it via the /getData endpoint.
The challange I’m facing is that currently, there is not checking on the string sent by client, so it could technically send malicious data, however, how can you check a string with all the different possible dangers?
schroeder Actually in the comment made a good example:
how is the risk different from hosting an html file on OneDrive, Google Drive, Dropbox, etc.?
Now, this back-end service that I’m facing this challange is not like the above mentioned apps, however, a similar use case would be with Google Drive and you are the security developer
user_a put in his drive: virus.html and shares it for the web.user_b click on the virus.html on the link, downloads it no problem and is pc blows up, or whatever malicious thing the virus.html was meant forI can see 2
user_a when it uploads virus.html? Can you prevent it somehow?user_b when it download virus.html?For example, someone can send data in a form of html (like above example) and also set it’s name as a html file with file extension.
If then you request that data, the file is downloaded.
I’ve already read and went through these related post, however, they are more specific to file and when adding a file into a folder. However in this case we are adding a file as array of bytes into a database and later retrieved.
Continue reading Malware prevention of data received in a POST endpoint
my question is very similar to this question but it has been closed without an actual answer.
I found an unrestricted file upload vulnerability in a Node.js application. Basically, I am able to upload any type of file and access the upload… Continue reading Node.js Unrestricted File Upload
All of the methods that I tried are here. I am pentesting a PHP site and the site has an upload file button that only allows PDF, .DOC, .DOCX, .MP3, .MP4, .JPG, .JPEG, .PPT, .XLS. Is there a way I can use one of these file formats to gain … Continue reading How to upload a PDF,DOC,DOCX,MP3,MP4,JPG,JPEG,PPT or XLS file to run php code [closed]
All of the methods that I tried are here. I am pentesting a PHP site and the site has an upload file button that only allows PDF, .DOC, .DOCX, .MP3, .MP4, .JPG, .JPEG, .PPT, .XLS. Is there a way I can use one of these file formats to gain … Continue reading How to upload a PDF,DOC,DOCX,MP3,MP4,JPG,JPEG,PPT or XLS file to run php code [closed]