Recon and Attack Vectors from My Logs

Re:Recon and Attack Vectors from My Logs by elric on Sunday October 02, 2022 @09:15AM (#33055631)

I'm not seeing the immediate value here. If your application is vulnerable to unauthenticated DELETE requests randomly deleting stuff, no amount of application firewalling is going to protect you, because I guarantee that whoever built the original application had no clue what they were doing.

[ Parent | on HN ]

Re:Recon and Attack Vectors from My Logs by nickjj on Sunday October 02, 2022 @09:37AM (#33055764)

> I'm not seeing the immediate value here.

The parent comment might have been coming at it from the angle of having a firewall in front of your web app is helpful because it blocks a whole bunch of bad actor traffic from ever touching your app's servers.

Of which I would agree with too. A decently popular site could end up having at least 10% of its traffic being malicious. Let your app servers worry about the legit traffic and filter the rest beforehand.

[ Parent | on HN ]

Re:Recon and Attack Vectors from My Logs by thakoppno on Sunday October 02, 2022 @10:34AM (#33056176)

The DELETE one appears the least sophisticated. Does any framework deploy out of the box with DELETE being enabled to the extent it deletes hypertext resources?

[ Parent | on HN ]