X-Content type header is missing vulnerability- how to test

-

 Vulnerability description

This HTTP header is typically used to control the MIME Type Sniffing function in web browsers. MIME Type Sniffing is a content evaluation function used by browsers when the content type is not specified. Basically, if the Content-Type header is blank or missing, the browser 'sniffs' the content and attempts to display the source in the most appropriate way.

Impact

If the Content-Type header is blank or missing, the browser 'sniffs' the content and attempts to display the source in the most appropriate way.

Attack simulation

Check response header information through owasp zap tool captured traffic.


Recommendation

Ensure each page is setting the specific and appropriate content-type value for the content being delivered.

Affected urls/Parameters


Comments

Post a Comment

Popular posts from this blog

Email Phishing

-
Image
Email Phishing may get an attacker your personal information like credentials, credit card information, registered mobile number, etc PII (Personal Identifiable Information) parameters. How to perform Phishing via Email? Step 1: Create an identical working website that is appearing quite similar to the official company website. This dummy website acts as a fake verified validation to the target to gain trust over. Ex. Gmail account login page, Facebook login page or any other website. Step 2: An important part to ponder over is the URI or URL of the fake but working website that has to be changed minutely in such a way that the target person is not able to spot the changes easily in its link and fewer people are aware as well as concerned about this security threat. Ex. For 'gmail.com' one can modify it to 'gma1l.com' or for 'facebook.com' that can be modified to 'facebeok.com'. Users enter their details here on the fake login page without checking...
Read more

Set password by default when transfering data through xender hot spot network.

-
Image
We are going to explain how to transfer data securely through xender app. Whenever we turn on hot spot of xender then mobile hot spot network turned on through a xender which is by default open network. In this case if our data connection is on then any one can access our network and may they perform crime through network. So always keep your network password protected. How to Set password in xender when turned on hot spot through it 1.  Go to settings menu in xender app. 2.  Under the connect phone tab click on to set connection password. 3.  At that time it will ask password give password on pop up box. 4.  Done. Now check your hot spot network is now secure with password.
Read more

Place to visit in December month

-
 December is a delightful time to explore India, as the weather is generally cool and pleasant in most parts of the country. Here are some destinations to consider visiting in December: 1. **Goa**: December is peak tourist season in Goa, with mild temperatures and clear skies. Enjoy sun-kissed beaches, water sports, vibrant nightlife, and festivals like Sunburn Music Festival and Christmas celebrations. 2. **Rajasthan**: December is an excellent time to visit Rajasthan as the weather is cool and pleasant. Explore cities like Jaipur, Udaipur, Jodhpur, and Jaisalmer to experience the rich culture, majestic forts, and vibrant markets. 3. **Kerala**: December marks the beginning of the tourist season in Kerala as the weather becomes cooler and drier. Cruise along the backwaters, relax on pristine beaches, and explore hill stations like Munnar and Wayanad. 4. **Agra, Uttar Pradesh**: December offers pleasant weather for visiting the iconic Taj Mahal in Agra. Witness the ...
Read more