Questions tagged [http]

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement.

HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement.

HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD.

1504 questions
-2
votes
1 answer

X-Frame-Options question

Is it valid to use X-Frame-Options:DENY X-Frame-Options:SAMEORIGIN in the response header together ? Or should only either one be present?
shashanka n
  • 99
  • 2
-2
votes
2 answers

How and what is used when information is sent to a hacker's server?

I'm working in some malware research, my main question is how the victim's data is transfered over the internet, protocol and how? Using HTTP or any other way? As fat as I know the data can be sent by a HTTP request for example:…
NathanWay
  • 559
  • 1
  • 8
  • 15
-3
votes
2 answers

Which HTTP requests support custom data in URL?

I am aware that HTTP GET requests are sent to web-server using query-string name/value pair in URL. This means that one is able to pass custom data to web-server. For example http://some_site.com.br/some-page.asp?name=custom_data . Are there any…
Martin
  • 441
  • 2
  • 8
  • 17
-3
votes
1 answer

insecure HTTP Methods Enabled -- how to control?

Here I am new to insecure HTTP Methods Enabled. The server allows HTTP methods that are considered dangerous. The following methods were enabled: PUT , DELETE Software used: Apache-tomcat-6.0.29. How to reproduce the same? How to fix this…
Ramakrishnan M
  • 101
  • 1
  • 1
  • 1
-3
votes
2 answers

Cannot use HTTPS or download stuff from sourceforge with a mac, what kind of soft does that?

I'm at a public library (france). I have a http library login to access that wifi. I just want to download some SFML zip to make some app, but many things are blocked, mainly https. I can't even access my gmail account. Must be for some security…
jokoon
  • 1
  • 1
-3
votes
1 answer

What type of attacks does HTTPS protect against?

What are some example attacks that could be vulnerable if HTTP is used, and that can be overcome in HTTPS? The only one I can think of is man in the middle attacks, where the intercepted traffic is in plain text. What are some others? Also are…
Mike
  • 3
  • 1
-3
votes
1 answer

Wireshark showing HTTP on top of TLS

I am seeing an HTTP request on top of SSL in Wireshark. Can anyone explain why?
Malcolm
  • 11
-3
votes
2 answers

Reverse DoS Attack

Is there anything on a computer or a router that prevents a hacker from doing a DoS on you. So let's say that you are going to https://www.google.com/ . When you enter that in the search bar, it sends a GET request to the Google's servers. Google…
ds_secret
  • 101
  • 5
-3
votes
1 answer

İ need some directories and files must be a hidden, for example /.htaccess/

İ need directories and files in the web web servers. Examples; can you write dir or file must be hidden /admin.php/ /.htaccess/ /wp-config.php/
Mücahit Demirhan
  • 1
  • 1
-3
votes
1 answer

How two identical domains work on Internet when they got signed from two different CA

Let's say A and B. Considering A and B are from same location. A went to the verisign and get signed for example.com B went to the godaddy.com and get signed for same domain(example.com) Now question is how they are going to resolve for dns names…
Vamsi Krishna Kanduri
  • 1
  • 1
-3
votes
2 answers

HTTP: weaknesses analysis & attitude

Many questions on this topic around here, but didn't find this particular angle Background: Sending any information of value with HTTP and through HTTPS is a bad idea (in the rare case a respected website would give you that option). The ubiquitous…
Cander
  • 1
  • 1
-3
votes
2 answers

How is it that SSL/TLS is so secure against password stealing?

I know that it is very easy to steal a username and password from someone who is signing in to some website over HTTP, but we protect against that with just SSL/TLS. ​ How's that possible? I mean, when I log in to some non-HTTPS website and I am a…
ShinobiUltra
  • 792
  • 7
  • 18
-4
votes
1 answer

Session hijacking

I know one way of doing session hijacking 1.copying the session value from the chrome browser and pasting the cookie value to firefox browser Is there any other way of doing session hijacking ? If yes please share the process of doing session…
Bhuvanesh Kumar
  • 21
  • 4
-4
votes
2 answers

Using my own encryption instead of https in app

I am writing a program that uses a webserver as a backend for communication between different users. Is it okay to use my own encryption (such as http://www.logikdev.com/2010/11/01/encrypt-with-php-decrypt-with-java/ ) instead of purchasing an ssl…
clum
  • 157
  • 4
-4
votes
2 answers

Web service that converts HTTP GET to POST?

Is there some online forwarding service that I can give HTTP GET parameters to, and it would create a form with the parameters and submit it as POST? For example, I'd like to give someone the URL:…
itsadok
  • 103
  • 6
1 2 3
…
99
100