Collaborate Disseminate
I have a desktop app that takes a file format and parses it to get some JSON data that is then send to a server.
My problem is figuring out if it is possible to somehow parse the data on the client and then send this JSON data to the serve… Continue reading Parse a File on Client and Send to Server Without Client Manipulating Data
I have a web server that will be used to manage the stock of a warehouse in a factory. The web server will be accessed only locally so the clients can update and view the available stock. The server can be accessed by 192.168.0.10/index.ht… Continue reading Do I need https for a web server that will be used locally? [duplicate]
Scenario: I have a Windows Host Machine in which I am running a VMware VM with a Linux distro (Guest Machine). In this Linux distro I am running BurpSuite.
I would like to know how could I be able to intercept the http and https requests t… Continue reading Intercept Host Traffic via Burp Suite (running in a Guest VMWare)
Let’s say I’m using http connection over a properly set up VPN with secure protocol and implementation. Then, most likely, the connection will be secure all the way until it exits the VPN server.
But since the traffic is unencrypted, sensi… Continue reading How easy is it for hackers to intercept http traffic between VPN exitnode and the destination web service without being inside the VPN or web server?
Simply put, the digest authentication goes as follows:
The user tries to access some resource that requires authentication.
The server responds with 401 and the www-authenticate header.
The client responds with a request that includes the… Continue reading How does the user stay authenticated after digest authentication?
What are the best trape alternatives with the same or better functionalities?
Continue reading The best alternatives jofpin/trape [closed]
The security team at my company has set a limit on the number of headers a HTTP request can contain (not header size, but an actual hard count limit on the number of headers).
A vendor has added a few headers for request tracing purposes, … Continue reading Is there a reason for a server-side limit on the number of HTTP headers allowed for each request?
When an SAML Authentication request is performed, let’s say that the Service Provider uses an HTTP 302 redirect. The user agent is redirected to the IdP via a GET request. This URL is provided by the SP.
In this case, is the request:
I have problem on my nethunter device with iptables (version 1.6).
I have created flask server (http port 80) and script that create ap using hostapd
For redirection I use dnsmasq (10.0.0.1 address)
dnsmasq conf:
interface=wlan1
dhcp-range… Continue reading Setting iptables for captive portal ap
Assume an Apache server (http, no authentication just hosting static files) is running in my local network which is hosting some zip files. Assume User A is requesting a zip file from the Apache server. Is it possible for User B on the sam… Continue reading Ways to inject malicious content during a HTTP file transfer