Collaborate Disseminate
I am testing a bug bounty website, and found an endpoint like www.example.com/infinite. When open it, it keep doing 302 redirect to itself until browser stops it for redirecting too many times.
For example:
www.example.com/infinite ==>… Continue reading Does an url that redirecting infinitely have any impact to website?
I am setting up an NGINX reverse proxy, which sits in front of an API. I would like to use:
proxy_set_header X-Secret-Key ${SECRET_VALUE};
to add a token to the request, which is then read by the API. ${SECRET_VALUE} is pulled from a secre… Continue reading Is there any way for a client to view headers set by an NGINX reverse proxy?
A web vulnerability assessment was done on our web app by a third company that specializes in security,
and we added common headers that we missing, and to check my headers internally before the third org could scan l used an online tool f… Continue reading HTTP: Headers vulnerability still showing after being added
I’m testing this application which is properly validating origin header on the sever side. However, if I add any domain and the expect domain as port, application still consider this valid.
Origin: https://random-domain.com:expected-domain… Continue reading Can the Origin header have alphabetical port or parameters in a real-life scenario?
Is there are mail-header I could use to mark a mail as spam, a header the most mail clients would understand, especially Outlook?
When the client receive the mail (pop3) it will see the header and place the mail into the junk folder.
(This… Continue reading "Universal" mail header to mark mail as spam?
I’m checking the options to harden my web app by setting the appropriate HTTP headers.
Besides the Content Security Policy (CSP) there are two another approaches: Document Policy and Permissions-Policy (Feature-Policy).
I’ve checked the W… Continue reading HTTP Headers: Document Policy vs. Permissions-Policy/Feature-Policy
I’m getting a random pop-up in my Firefox browser, two said: Hi I’m Karol, I’m only a few feet away with her picture that popped up in the upper right hand corner of the browser
the only sites I visit are Lowe’s, My email, My bank account … Continue reading Random pop up on Firefox without toolbars [closed]
This application sends data to the server in JSON and checks for the content-type header, but I was able to bypass this, but it sends another custom header which is not a secret token or something which may have acted like an actual CSRF t… Continue reading Are application using custom header instead of CSRF token safe?
In a CSRF defense based on checking forbidden headers, should I check Origin/Referer header against the ServerName configuration directive, or is it sufficient to simply check against the HTTP Host header? What are the characteristics of t… Continue reading Should I check Host header or ServerName for CSRF defense?
I am performing a security assessment on a web application and I found it doesn’t have the Content-Security-Policy, but instead it has Content-Secure-Policy. It is literally the first time I’m seeing such a case and I would like to know:
A… Continue reading Content-Secure-Policy headers