Vulnerability Scanner For Websites.: Click To Edit Master Title Style

Click to edit Master title style
Vulnerability
Scanner
for websites.
1
Browser Security
Mitigating Browser attacks by using proper configuration settings.
2 2
Why focus on Browser security?

Previously, attackers used to attack web servers. But web application are now
very secure and deploy very high end computing machines to detect and mitigate
threats on real time basis. Use of IDS and IPS can detect malicious payloads with
packets in almost real time. Moreover Databases and servers are kept in
DMZ(DeMilitarized Zones) to prevent any kind of physical Infiltration.
On the other hand client side applications doesn’t deploy such high end
prevention mechanisms so hackers have s t a r t e d attacking client side
applications. Thus, the need for browser security.
3 3
Click to listed
OWASP edit Master title
Top 10 style
vulnerabilities
● Injection
● Broken Authentication and session management
● Sensitive data exposure
● XML external entities
● Broken access
● Security Misconfig
● Cross Site Scripting(XSS)
● Insecure Deserialization
● Using known vulnerable components
● Insufficient Logging and monitoring
4 4
Concept
Same
●
Origin Policy
Eg: Same
Under the origin
policy,: ahttp://example.com
web browser permits
& http://exaple.com/setting
scripts contained in a first web page to access data in a second web
page, but only if both web pages have the same origin.
• Different origin : https://example.com:4657 & http://example.com:8080/settings have different origin
● An origin is defined as a combination of URI scheme, host name and port number.
● This policy prevents a malicious script on one page from obtaining access to sensitive data on another
webpage through the page’s DOM.
5 5
Prevention:
Set the configuration in your browser such that it follows strict origin
policy with no exception.
Example:
-For firefox: security.fileuri.strict_origin_policy must be set to true.
6
Client Side (Browser based) attacks

1) Cross Site Scripting
Operation:
● Attacker injects specially crafted code into any legitimate or trusted website.
● User tries to access this so called trusted website.
● Attacker added code runs on user’s(client) machine with full privilege.
Consequence:
● Sensitive data leakage
● Malicious javascript execution
● Key logging
● Cookie theft
● Phishing
● Privilege escalation 7 7
2) Cross Site request forgery
Operation:
● Attacker is interested in hacking into a Website(web Application) X.
● User(victim) logs into the website X.
● Attacker forces User’s browser to send HTTP request to website X.
● Attacker accesses functionality of the website X using the communication
between the website X and user(already authenticated to website X)
Consequence:
● Malicious Javascript execution
● Key logging
Web Server thinks user is attacking the website and is the attacker but actual attacker is sitting
somewhere else, user is victim here.
8 8
3) Phishing:
Operation:
● Attacker creates a fake website identical to original website.
● Sends it to user asking credentials and send login failed message after
submit. Users generally consider it there typing error and ignore it.
Consequence:
● Sensitive Data leakage
9 9
4) Insecure data transfer
Operation:
● User transmits data to the web server in plaintext.
● Attacker sniffs and read the data.
● Attacker hijacks user’s web session using the sniffed data.
Consequence:
● SSL/TLS based attacks - BEAST(2011), CRIME(2012), LUCKY13(2013),
TIME(2013), BREACH(2013), POODLE(2014), FREAK(2015),
Logjam(2015), SLOTH(2015)
● MiTB attack (Man in The Browser)
1010
5) WebGL based attack
Operation:
● WebGL is a rendering engine that allows 3D images & animations.
● Most of the graphics card & drives are designed with less emphasis
on security.
● This leads to remote attacker executing arbitrary code using WebGL content
and exploit user’s machine.
Consequence:
● Privilege Escalation
1111
Case Study
Case Study: Firefox web browser security settings - meaning, implications
Sr. No Setting Meaning Default Value Expected Value
1. Clipboard event Copy, Paste True False

from Webpage
2. Geo User location aware True False
3. Cookie behaviour Track user 0: All Cookies 1: Cookies from

across various allowed originating server
websites
4. Cookie Lifetime Cookie 0:Originating 1: Cookies from
expiration Server sets originating server
policy
5. Http Referer Track user’s 2: Send http 0: Don’t Send
Header browsing referer header http referer
activity header
1212
Mozilla Firefox Security Configuration
Attack Configuration Default value Recommended

properties value
Cross Site security.csp.enable True True

Scriting
network.cookie.coo 0(all cookies) 1(cookies from

kieBehavior origin)
Cross Site request network.http.sendRe 2 0

forgery fererHeader
SSL/TLS security.tls.version.m ax 4 4
WebGL webgl.disabled False True

1313
Summary:
● Misconfigured web browsers plays a vital role in client side attacks.
● These misconfiguration may arise due to default browser settings, user
having less or no adequate knowledge of secure browsing.
● We propose a framework to detect and correct configuration setting
errors of web browser.
● The present work concentrates on security vulnerability related cookie
theft, ssl based attacks.
1414

Vulnerability Scanner For Websites.: Click To Edit Master Title Style

Uploaded by

Copyright:

Available Formats

Vulnerability Scanner For Websites.: Click To Edit Master Title Style

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Vulnerability Scanner For Websites.: Click To Edit Master Title Style

Uploaded by

Copyright:

Available Formats

Click to edit Master title style

Why focus on Browser security?

-For ﬁrefox: security.ﬁleuri.strict_origin_policy must be set to true.

Client Side (Browser based) attacks

Sr. No Setting Meaning Default Value Expected Value

1. Clipboard event Copy, Paste True False

3. Cookie behaviour Track user 0: All Cookies 1: Cookies from

Attack Configuration Default value Recommended

Cross Site security.csp.enable True True

network.cookie.coo 0(all cookies) 1(cookies from

Cross Site request network.http.sendRe 2 0

WebGL webgl.disabled False True

You might also like