#http headers

[blackmoreops]

Customise Nginx Server Headers for Better Security

When running a website, security should always be one of your top priorities. One simple yet effective security measure is customising your web server headers. By default, Nginx displays its name and version in the server header, potentially exposing valuable information to attackers. In this comprehensive guide, we’ll explore how to customise Nginx server headers for better security without…

Customise Nginx Server Headers for Better Security

[i-am-techgnosis]

Chrome extension to modify HTTP headers

Github: https://github.com/Automattic/a8c-chrome-mod-header This is a Chrome extension that allows you to modify request headers for all requests in a page. It can be useful for development, debugging and security testing. Features Add, modify or remove request headers. Installation Clone this repository or download the ZIP file. Open Chrome and go to chrome://extensions/. Enable…

Chrome extension to modify HTTP headers

[wtools]

HTTP Headers Lookup - Wtools.Org

Get all the HTTP headers that return a URL for a simple GET request with our HTTP Headers Lookup tool.

[insidehtml5]

HTTP headers for the responsible developer

Twilio posts cloud communications trends, customer stories, and tips for building scaleable voice and SMS applications with Twilio's APIs.

[kevinjameshunt]

Sending and Receiving AVPlayer HTTP Headers

Sending and Receiving AVPlayer HTTP Headers

While investigating a series of spikes in a certain error code for one of the video streaming iOS and tvOS apps I have been working on for my day job, we were asked by our CDN server team to inject and inspect the information being sent to and from the server during HLS streaming. In order to do this, we needed to add additional HTTP headers to the requests made by AVPlayer and grab the headers…

View On WordPress

[informationsecurityjourney]

n00bz Level 7

In level 7, we get a page with error 404 - page not found, with the following text: 

“f00 not found Something is not right here??? btw...bounty $70″

Interestingly, the page is named 404.php, which also correspond to the hint that it should be in the http header. Remembering that the previous page naming follows the flow “levelone.php” ... “levelsix.php”, we decided to try our luck with changing "404.php” to “levelseven.php”. By checking the http header, we get the following text “aW5mb3NlY19mbGFnaXNfeW91Zm91bmRpdA==“. Again, double equals means its a base64 decode. Decoding it, we get “ infosec_flagis_youfoundit”.

[thesecuritysleuth]

Sunday Round up: 22nd of May 2016

Sunday Round up for the week ending the 22nd of May 2016:

Articles:

The Security of HTTP-Headers: http://www.contextis.com/resources/blog/security-http-headers/

White hats bake TeslaCrypt master key into universal decryptor: http://www.theregister.co.uk/2016/05/19/white_hats_bake_teslacrypt_master_key_into_universal_decryptor/

EhTrace - Tool for Tracing Execution of Binaries on Windows: http://www.kitploit.com/2016/05/ehtrace-tool-for-tracing-execution-of.html?utm_source=dlvr.it&utm_medium=facebook&m=1

Forensic Focus Forum Round-Up: http://m.forensicfocus.com/?url=http://www.forensicfocus.com/News/article/sid=2661/&utm_referrer=#2802

WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack: http://www.kitploit.com/2016/05/wifi-pumpkin-v075-framework-for-rogue.html?utm_source=dlvr.it&utm_medium=facebook&m=1

The Backdoor Factory (BDF) – Patch Binaries With Shellcode: http://www.darknet.org.uk/2016/05/backdoor-factory-bdf-patch-binaries-shellcode/

Run Metasploit Framework as a Docker Container Without Installation Pains: https://zeltser.com/metasploit-framework-docker-container/

Twitter:

"Does this leak information?" #computerscience #feedly https://t.co/OmmmCWtUv8

— The Security Sleuth (@Security_Sleuth) May 16, 2016

"Hacker fans give Mr. Robot website free security checkup" #informationsecurity #feedly https://t.co/coI04P8pX4

— The Security Sleuth (@Security_Sleuth) May 16, 2016

"That time a patient’s heart procedure was interrupted by a virus scan" #informationsecurity #feedly https://t.co/HcJmvxl8aR

— The Security Sleuth (@Security_Sleuth) May 16, 2016

#Nokia is #back https://t.co/5r9KAjzQ9a

— The Security Sleuth (@Security_Sleuth) May 18, 2016

"Then there were 117 million. LinkedIn password breach much bigger than thought" #informationsecurity #feedly https://t.co/ksuZT0j3Ik

— The Security Sleuth (@Security_Sleuth) May 18, 2016

"Hacker Steals Money from Bank and Donates $11,000 to Anti-ISIS Group" #infosec #feedly https://t.co/aZxy5TaHZc

— The Security Sleuth (@Security_Sleuth) May 20, 2016

"Facebook Sued for illegally Scanning Users' Private Messages" #infosec #feedly https://t.co/9dEC03dngy

— The Security Sleuth (@Security_Sleuth) May 20, 2016

Read last weeks round up here

If you found some other interesting stuff this week feel free to leave a link to it in the comments section.

[agencearcange-blog]

3 PLUG-INS CHROME DONT VOUS NE VOUS PASSEREZ PLUS !

Les outils professionnels sont légion. Pour un usage rapide et pratique lors de votre surf sur le Web, les plug-ins pour navigateurs sont très utiles. Avec un clic dans la barre d’outils, on a accès aux informations souhaitées. Voici trois de ces plug-ins dont vous ne vous passerez plus !

Buzzsumo Chrome Extension

En novembre 2015, Twitter a annoncé supprimer l’indicateur numérique de partage sur ses boutons. Il est donc plus difficile de voir en un coup d’œil le taux de publication d’une URL, lorsqu’on la consulte depuis son navigateur.
 Pour répondre à ce besoin, Buzzsumo a développé un plug-in pour navigateur qui reprend les informations de partage en se connectant à l’API Twitter. Malheureusement, pour que cela fonctionne entièrement il faut se connecter à son compte Buzzsumo. Mais pour tout ce que fait de bien cet outil, cela peut largement en valoir la chandelle !

Check My Links

Une page Web sur laquelle vous n’êtes pas allé depuis Noël dernier, un pré-audit pour le blog d’un prospect ? Voici l’outil qui va s’avérer être plus qu’utile. 
Check My Links vous permet de vérifier l’état des liens sur une page Web en quelques secondes. Il va en effet analyser les liens un par un, et afficher en rouge ceux qui sont cassés. C’est très pratique pour vérifier que vos contenus sont toujours à jour, y compris les autres pages qu’ils citent !

http Headers

En quelques mots, http headers fait la même chose que Check My Links mais pour l’URL que vous êtes en train de consulter. C’est fort bien lorsque vous souhaitez connaître le statut http d’une page. On l’appelle aussi le code réponse. 
Pour rappel : 200 > OK 500 > erreur serveur 404 > page non trouvée 301 > redirection permanente 302 > redirection temporaire.

Liens utiles : Buzzsumo Check My Links http Headers Liste des en-têtes http et leurs significations