Collaborate Disseminate
I’m able to edit a parameter which is then reflected inside a link. I’d like to know how and if it’s possible to cause a redirect. In shorts when i edit the parameter example like this example=/test.com that value is reflected in generated… Continue reading How can i cause a redirect in browser?
What are some common parameters in the url that are vulnerable to sql injection?
Continue reading What are some common parameters in the url for sql injection?
A client is developing a website which is vulnerable to reflected XSS through a GET parameter:
https://example.com/vulnerable-url?”)||true)alert(“XSS”);</script>
I would like to demonstrate this vulnerability by providing a link l… Continue reading Demonstrating reflected XSS with GET Parameter and URL encoding
HTTP knows to look for user names and passwords in authorization
headers in HTTP requests. So this is at HTTP level.
Is it correct that putting user passwords into message bodies of
HTTP requests is at web application level, which is high… Continue reading Does HTTP protocol interpret contents of cookies and query strings in URL, whereas it doesn’t interpret message bodies?
https://www.amazon.com/JOYO-Wireless-Infinite-Sustainer-Handheld/dp/B07WZL5ZDK/ref=mp_s_a_1_6?keywords=heet+ebow&qid=1580579507&sr=8-6
Above is a link to a product. You can see in the URL what I looked up to find it. As an informat… Continue reading What benefit does Amazon get from including search results in product URLs? [closed]
I am wondering if the “/todo1” part of the below URL
curl https://someserver:5000/todo1 -d “data=Remember the milk” -X PUT
Gets encrypted over TLS/HTTPS, or is the full URL that you’re sending your request to visible to a middle man?
… Continue reading does HTTP PUT data get encrypted over TLS (HTTPS)? [duplicate]
How do I gather Domains?
I want to collect as many as possible Domains from a specific european country for further analysis.
Would it be possible to gather them through Ip Ranges? If yes how do I do this?
Or is there any other way?
I have setup a local apache server with php module.I deployed a dvwa in my localmachinne..I am learning about XSS(DOM) type of attack.I setup the low level security in dvwa.When i added <script>alert()</script>
in the url i got… Continue reading Injecting script from outside for local machine url request
Hacker is trying to attack the site by using the following SQL injection query to get the SQL version.
Using URL site. example:
www.abc.com/?queryParamString=(SELECT 9701 FROM(SELECT COUNT(*),CONCAT(0x71787a7171,(SELECT (E… Continue reading SQL injection using URL query string (web application/php server)
I own an ecommerce platform that sells large (500 megabyte+) ebooks. To reduce server costs I am looking at hosting the ebooks on S3 and using Sendowl/ FetchApp to create the links to the downloads.
My understanding is that … Continue reading Is using "Signature Versioning" in Amazon S3 a secure way of selling ebooks?