Websites Security | khalil shreateh

secure your website , scripts , patches , php , html , jquery , asp .

Server-side access control misconfigurations that allow 403 bypasses

Details: Written by: khalil shreateh; Category: Websites Security; Hits: 41

security

A 403 Forbidden response means the web server received your request but is deliberately refusing to serve that file or directory. In a properly configured server, that refusal is absolute — but misconfigurations can sometimes let a request reach the file anyway, through how the server or an underlying application interprets slightly modified URLs. Understanding why this happens is more useful than knowing any single trick, since the trick changes but the underlying misconfiguration pattern doesn't.

Details: Written by: khalil shreateh; Category: Websites Security; Hits: 6452

In this article you will learn what is Cross-Site Request Forgery (CSRF), How to exploit CSRF and how to protect against it .

Details: Written by: khalil shreateh; Category: Websites Security; Hits: 6936

security

One of the oldest and most pervasive attacks launched against websites is the Distributed Denial of Service (DDoS) attack. In a typical DDoS attack, an attacker causes a large number of computers to send data to a server, overwhelming its capacity and preventing legitimate users from accessing it.

Arbitrary File Download vulnerabilities occur through path traversal

Details: Written by: khalil shreateh; Category: Websites Security; Hits: 9446

cybersecurity-research

Arbitrary file download — more precisely known as path traversal or directory traversal — happens when a web application lets a user specify a filename to retrieve, but doesn't properly restrict that input to the files it's actually meant to serve. The result: an attacker can potentially retrieve any file the web server process has permission to read, not just the ones the application intended to expose.

Details: Written by: khalil shreateh; Category: Websites Security; Hits: 14508

Beside using CAPTCHA there is alternative methods to protect your website control panel .

This is a simple tutorial i made with sessions in PHP to prevent brute force attacks against your website by limiting login attempts for users .

Page 1 of 2

Social Media Share

Latest Tech

Latest Posts

Why "403 Forbidden" Bypasses Happen — and How to Configure Your Server to Prevent Them

Cross-Site Request Forgery (CSRF) Exploit And Prevention

An introduction to JavaScript-based DDoS

Arbitrary File Download (Path Traversal): How It Happens and How to Prevent It

Limit Login Attempts - Blocking Brute Force Attacks

Information Security