Posts

Showing posts with the label Code Security

9 security tips to protect your website from hackers

-
Image
You may not think your site has anything worth being hacked for, but websites are compromised all the time. The majority of website security breaches are not to steal your data or deface your website, but instead attempts to use your server as an email relay for spam, or to setup a temporary web server, normally to serve files of an illegal nature. Other very common ways to abuse compromised machines include using your servers as part of a botnet, or to mine for Bitcoins. You could even be hit by ransomware.  Hacking is regularly performed by automated scripts written to scour the Internet in an attempt to exploit known website security issues in software. Here are our top 10 tips to help keep you and your site safe online. 01. Keep software up to date It may seem obvious, but ensuring you keep all software up to date is vital in keeping your site secure. This applies to both the server operating system and any software you may be running on your website such as a CMS...
Post a Comment
Read more

Testing for HTML Injection

-
Image
Summary HTML injection is a type of injection issue that occurs when a user is able to control an input point and is able to inject arbitrary HTML code into a vulnerable web page. This vulnerability can have many consequences, like disclosure of a user's session cookies that could be used to impersonate the victim, or, more generally, it can allow the attacker to modify the page content seen by the victims. How to Test This vulnerability occurs when the user input is not correctly sanitized and the output is not encoded. An injection allows the attacker to send a malicious HTML page to a victim. The targeted browser will not be able to distinguish (trust) the legit from the malicious parts and consequently will parse and execute all as legit in the victim context. There is a wide range of methods and attributes that could be used to render HTML content. If these methods are provided with an untrusted input, then there is an high risk of XSS, specifically an HTML ...
Post a Comment
Read more

Popular posts from this blog

How to Secure Session Management in Node

-
In a web application, data is transferred from a browser to a server over HTTP. In modern applications, we use the HTTPS protocol, which is HTTP over TLS/SSL (secure connection), to transfer data securely. Looking at common use cases, we often encounter situations where we need to retain user state and information. However, HTTP is a stateless protocol. Sessions are used to store user information between HTTP requests. We can use sessions to store users' settings like when not authenticated. Post authentication sessions are used to identify authenticated users. Sessions fulfill an important role between user authentication and authorization. Exploring Sessions Traditionally, sessions are identifiers sent from the server and stored on the client-side. On the next request, the client sends the session token to the server. Using the identifier, the server can associate a request with a user. Session identifiers can be stored in cookies, localStorage, and sessionStorage. Session identi...
Read more

How to download a file using command prompt (cmd) Windows?

-
Image
If you’re like most Internet users, you download various types of files now and then. You either download these files with your web browser or some download manager software. Have you ever considered downloading files using the command prompt i.e. CMD? If not, we recommend you to try it. It’s quite interesting apart from being very useful as well. In this article, we’ll show you how to download a file using command prompt aka CMD. How to download a file using command prompt?   There are several useful commands for the Command Prompt and one of them is  bitsadmin . Though bitsadmin has several uses, here we shall limit this article to its role in downloading files only. If you want to read the details about bitsadmin syntax, continue reading this section. Otherwise, you can scroll down to the next section –  Downloading a file .   The syntax of bitsadmin is : BITSADMIN [/RAWRETURN] [/WRAP | /NOWRAP] command   As you know, the parts of the syntax inside ...
Read more

Angular 9 - User Registration and Login Example & Tutorial

-
Image
In this tutorial we'll go through an example of how to build a simple user registration, login and user management (CRUD) application with Angular 9. The project is available on GitHub at  https://github.com/cornflourblue/angular-9-registration-login-example . The Angular CLI was used to generate the base project structure with the  ng new <project name>  command, the CLI is also used to build and serve the application. For more info about the Angular CLI see  https://angular.io/cli . Styling of the example app is all done with Bootstrap 4.4 CSS, for more info about Bootstrap see  https://getbootstrap.com/docs/4.4/getting-started/introduction/ . Here it is in action:   (See on StackBlitz at  https://stackblitz.com/edit/angular-9-registration-login-example ) Running the Angular 9 Login Tutorial Example Locally Install NodeJS and NPM from  https://nodejs.org . Download or clone the Angular project source code from  https:...
Read more