#http headers

When running a website, security should always be one of your top priorities. One simple yet effective security measure is customising your web server headers. By default, Nginx displays its name and version in the server header, potentially exposing valuable information to attackers. In this comprehensive guide, we’ll explore how to customise Nginx server headers for better security without…

Github: https://github.com/Automattic/a8c-chrome-mod-header This is a Chrome extension that allows you to modify request headers for all requests in a page. It can be useful for development, debugging and security testing. Features Add, modify or remove request headers. Installation Clone this repository or download the ZIP file. Open Chrome and go to chrome://extensions/. Enable…

Sending and Receiving AVPlayer HTTP Headers

While investigating a series of spikes in a certain error code for one of the video streaming iOS and tvOS apps I have been working on for my day job, we were asked by our CDN server team to inject and inspect the information being sent to and from the server during HLS streaming. In order to do this, we needed to add additional HTTP headers to the requests made by AVPlayer and grab the headers…

In level 7, we get a page with error 404 - page not found, with the following text: 

“f00 not found Something is not right here??? btw...bounty $70″

Sunday Round up for the week ending the 22nd of May 2016:

Articles:

The Security of HTTP-Headers: http://www.contextis.com/resources/blog/security-http-headers/

White hats bake TeslaCrypt master key into universal decryptor: http://www.theregister.co.uk/2016/05/19/white_hats_bake_teslacrypt_master_key_into_universal_decryptor/

EhTrace - Tool for Tracing Execution of Binaries on Windows: http://www.kitploit.com/2016/05/ehtrace-tool-for-tracing-execution-of.html?utm_source=dlvr.it&utm_medium=facebook&m=1

Forensic Focus Forum Round-Up: http://m.forensicfocus.com/?url=http://www.forensicfocus.com/News/article/sid=2661/&utm_referrer=#2802

WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack: http://www.kitploit.com/2016/05/wifi-pumpkin-v075-framework-for-rogue.html?utm_source=dlvr.it&utm_medium=facebook&m=1

The Backdoor Factory (BDF) – Patch Binaries With Shellcode: http://www.darknet.org.uk/2016/05/backdoor-factory-bdf-patch-binaries-shellcode/

Run Metasploit Framework as a Docker Container Without Installation Pains: https://zeltser.com/metasploit-framework-docker-container/

Twitter:

"Does this leak information?" #computerscience #feedly https://t.co/OmmmCWtUv8

— The Security Sleuth (@Security_Sleuth) May 16, 2016

"Hacker fans give Mr. Robot website free security checkup" #informationsecurity #feedly https://t.co/coI04P8pX4

— The Security Sleuth (@Security_Sleuth) May 16, 2016

"That time a patient’s heart procedure was interrupted by a virus scan" #informationsecurity #feedly https://t.co/HcJmvxl8aR

— The Security Sleuth (@Security_Sleuth) May 16, 2016

#Nokia is #back https://t.co/5r9KAjzQ9a

— The Security Sleuth (@Security_Sleuth) May 18, 2016

"Then there were 117 million. LinkedIn password breach much bigger than thought" #informationsecurity #feedly https://t.co/ksuZT0j3Ik

— The Security Sleuth (@Security_Sleuth) May 18, 2016

"Hacker Steals Money from Bank and Donates $11,000 to Anti-ISIS Group" #infosec #feedly https://t.co/aZxy5TaHZc

— The Security Sleuth (@Security_Sleuth) May 20, 2016

"Facebook Sued for illegally Scanning Users' Private Messages" #infosec #feedly https://t.co/9dEC03dngy

— The Security Sleuth (@Security_Sleuth) May 20, 2016

Read last weeks round up here

3 PLUG-INS CHROME DONT VOUS NE VOUS PASSEREZ PLUS !

Les outils professionnels sont légion. Pour un usage rapide et pratique lors de votre surf sur le Web, les plug-ins pour navigateurs sont très utiles. Avec un clic dans la barre d’outils, on a accès aux informations souhaitées. Voici trois de ces plug-ins dont vous ne vous passerez plus !