A web browser is an application which uses HTTP and related protocols to retrieve HTML and XML data from servers. As the web has become a critical source of information and communication, web browsers have become a critical component in information request, transfer and management.
Questions tagged [web-browser]
1603 questions
0
votes
3 answers
How can clicking on a URI infect a host?
I watched a generic information security awareness presentation earlier, in which all that was required for the presenter to penetrate an organisation (with a meterpreter/reverse shell), was for someone on the inside to click, or type (or otherwise…
![](../../users/profiles/83289.webp)
voices
- 1,649
- 7
- 22
- 36
0
votes
1 answer
Secure authentication on SPA/Javascript application with “remember me” support
I have 3 website projects as follows;
identity.example.com (asp.netcore + IdentityServer4)
api.example.com (asp.netcore webapi)
www.example.com (asp.netcore + aurelia)
I am able to authenticate the user using SPA user-agent using implicit grant…
![](../../users/profiles/143691.webp)
Hasan
- 101
- 4
0
votes
1 answer
Distinguishing Between Brute force and Crawlers in error reporting
I have been receiving a great many emails recently reporting issues within my website that, when gone back and looked up, have been reported as being Brute force attacks. Upon further inspection of their location. I have noticed a great deal of them…
![](../../users/profiles/137164.webp)
Joshua
- 157
- 5
0
votes
2 answers
Restore session in Firefox
Restore session in Firefox
What does this mean, is it related to the session concept which is stored on the web server?
If I stop the computer with my web-app, and then start it again before the timeout set on the session on the server expires,…
![](../../users/profiles/3642.webp)
Anyname Donotcare
- 265
- 2
- 8
0
votes
1 answer
Download webcrawler output from Dirbuster
Hello security experts,
I've made a wordlist to search some content on a specific webserver. DirBuster found a list of 500 images, is there a way to download them all on my computer.
Kind regards
![](../../users/profiles/137405.webp)
user3657270
- 3
- 1
0
votes
1 answer
Do I still use HTTPS when I search from the URL bar in Firefox?
If I go to the homepage of the search engine I use, I can see the green lock to the left of the URL bar which indicates that I use HTTPS. Then when I input a search query in the box on the homepage, I get results, still over HTTPS. But I also set it…
![](../../users/profiles/136370.webp)
user136370
- 41
- 2
0
votes
1 answer
Which URL schemes are dangerous (XSS exploitable)?
I know that a blacklist approach to URL filtering isn't the most secure, but let's say that in addition to this filtering we're also rewriting all untrusted links to go through a redirect page that warns the user about the risks, and that we're…
![](../../users/profiles/37409.webp)
Changaco
- 101
- 5
0
votes
2 answers
How to mimick malicious activity in a network?
I'm trying to setup a VM that will try to mimick malicious web browsing behavior. It should download malware and just get infected.
There are a lot of open source threat intel feeds with bad IPs and URLs. Is there a way to have it visit malicious…
![](../../users/profiles/134834.webp)
Bilal
- 1
0
votes
1 answer
Implementation of a FREE web filter
I just want some advice for the implementation of a web filter for a school network. Just want to block some contents and url. A free tool should be fine I guess.
Any recommendations?
Thanks!
![](../../users/profiles/9232.webp)
FrozenButcher
- 121
- 1
- 6
0
votes
1 answer
Does Google Chrome read the contents of screen
Lately I noticed that whenever I'm reading an article and I want to search something I read there, as I'm typing the keyword, Chrome autofills it. For example, I was reading a reddit post and someone mentioned the game Dungeons and Dragons. I opened…
![](../../users/profiles/130099.webp)
Neerkoli
- 123
- 4
0
votes
1 answer
Theoretical and practical limits on adblocking
Not sure if this is the right SE, feel free to migrate if necessary.
My question is simple: the only way for a web server to detect if you are adblocking is to see if the ads were actually served, since once they're client-side it's trivial to just…
![](../../users/profiles/52562.webp)
Elliot Gorokhovsky
- 496
- 3
- 12
0
votes
0 answers
From where can I get latest security bug fixes list/details implemented by web browsers?
Every now and then a new vulnerability is discovered in web browsers. Some get fixed with time, some don't (maybe because of dependencies).
From where can I get the report of latest bugs fixed or pending?
![](../../users/profiles/128742.webp)
mfs
- 531
- 1
- 6
- 9
0
votes
2 answers
Why are all cookies with same name included when asked by server? Doesn't it raise cookie's integrity violation chances?
Cookies are set and stored as a name/domain/path to value attributes mapping, but only name-value pairs are presented to both JavaScript and web servers. This asymmetry allows cookies with the same name but different domain and/or path scopes to be…
![](../../users/profiles/128742.webp)
mfs
- 531
- 1
- 6
- 9
0
votes
1 answer
Browser hijacked on Debian
Seems someone has setup something in my system. I have several ports on localhost sending outbound communications. When in Firefox I type web.whatsapp.com for whatsapp web, I get a browser re-direct.
Anybody knows some good approach about cleaning…
![](../../users/profiles/129101.webp)
MarkSkayff
- 109
- 3
0
votes
1 answer
What exactly are the keys doing in a Certificate?
I'm reading up on web security. And I'm a bit lost at a few places.
First stage is the Hello phase.
The client sends a message to the server telling the server, I will use these versions of SSL, and cipher suites. First question is, how exactly do…
![](../../users/profiles/101646.webp)
christopher clark
- 137
- 5