0
votes
0answers
31 views

what program would make this http request? have I been hacked?

I have a small digital ocean instance running a personal blog. I recently set up apache logging and noticed people are making requests trying to hack wordpress (I'm not running wordpress). I also ...
1
vote
0answers
84 views

Opera on IP TV - cross network access to LAN

I am working on a software involving IPTV which has the following requirements: The browser is Opera loaded on Philips TV. The browser has "Enable Cross Network Navigation" turned off. The homepage ...
2
votes
1answer
478 views

http Redirect to https Sometimes Leads to “this page contains other resources which are not secure”

In Chrome (though I may have seen similar behavior in other browsers), type in http://www.google.com. You will always be redirected to https://www.google.com. Usually when I do this, I get the good ...
2
votes
1answer
126 views

Is HTTPS connection hijacking possible?

This really bothers me a long time, because.. to encrypt / decrypt data you first need to send a encryption key / decryption key (on an unencrypted connection) to the computer you are comunicating ...
0
votes
1answer
3k views

Resolving “HttpAdaptor JMXInvokerServlet is accessible to unauthenticated remote users” vulnerability

Recently our security info team has determined there is a vulnerability in one of our systems. Vulnerability description: JBoss HttpAdaptor JMXInvokerServlet is Accessible to Unauthenticated ...
0
votes
1answer
1k views

Firefox: Security concerns of sending referer headers

Recently, I found that I was failing to log into certain websites using Firefox. Not sure when exactly it started happening. Right now, I'm running Firefox 14.0.1. Logins work fine on other ...
1
vote
1answer
28 views

Is it possible to change content of a file residing on other server using HTTP 1.1 features?

Let's say we have a file on server which have all permissions 777. Is it possible to make a script, situated on other server than the file to modify. The script uses HTTP 1.1 protocol features only to ...
1
vote
1answer
44 views

Ensuring personal security on a shared network

I just moved into a communal office and one the utilities offered a free web access via a shared network. Aside from being blindly trusting or constantly paranoid what active steps can I take to ...
1
vote
3answers
805 views

How to ensure HTTPS is used to send credentials?

As a user, how do I know my user name and password sent to a server is encrypted with HTTPS? Let me preempt the answer of "look for the little lock" or "look for https in the URL" with the following ...
0
votes
4answers
513 views

How to restrict access to a server application

I have written a simple server application (with an HTTP interface). I want to ensure that only calls from the local machine are processed - i.e. I want to prevent outsiders from accessing/using my ...
0
votes
2answers
2k views

How to change Firefox's referer header for all http requests

When making a request for (for example) http://example.com/foo/bar.baz, Firefox sends a referer header indicating which page I clicked a link from, or is loading a picture, etc. Eg: Referer: ...
0
votes
1answer
2k views

HTTP trace method enabled

I run some scans with nikto, and it tells me that HTTP trace method is enabled. What is HTTP trace method ? And what can be insecure about it?
2
votes
2answers
658 views

Possible Hack with FTP - What are the solutions?

I was reading the FTP rfc and hence had this idea. Suppose there are several public ftp servers that allow anonymous user login. I open a control connection on port 21 to each of these servers. Now ...
0
votes
2answers
3k views

HTTP (FORM) brute force cracker freeware [closed]

We use a NAS in our small office which is set-up so that each person has their own private directory on it. However the password to enter the HTTP administration area has been forgotten so we're ...