webapp-security.com

Tasks

Select one version of your site as main and make a redirect from other versions to that one.
Avoid using deprecated HTML tags.

SEO

URL

Domain : www.webapp-security.com/

Character length : 24

Title

Ivano Binetti | Personal Blog

Keywords (meta keywords)

Good! The website does not use “meta keywords”.

Open Graph Protocol

Error! The website does not use the OG (Open Graph) protocol.

Dublin Core

Dublin Core is not used

Underscores in the URLs

Error! Hyphen (-) is a better solution than underscore (_) in the URLs

http://www.webapp-security.com/ivano-binetti-italian_security_researche... ("About Me")
http://www.webapp-security.com/ivano-binetti_publications ("My Publications")

Search engine friendly URLs

Good! The website uses SEO friendly URLs.

Checking the robots.txt file

There is robots.txt file.
https://webapp-security.com/robots.txt

User-agent	Disallowed for the search engines
*	/wp-admin/

Social

Social Engagement

No info found.

Content

Doctype

HTML 5

Encoding

Perfect! The character encoding is set: UTF-8.

Language

We have found the language localisation: ”en”.

Title

Ivano Binetti | Personal Blog

Character length : 29

Good! The title’s length is between 10 and 70 characters.

Text / HTML ratio

Ratio : 30%

Good! The text / code ratio is between 25 and 70 percent.

Headings

H1	H2	H3	H4	H5	H6
11	1	8	0	0	0

Heading structure in the source code

<H1> Ivano Binetti
<H2> Personal Blog
<H3> Main menu
<H3> Post navigation
<H1> Apache Tomcat 5.5.25 Deploy/Undeploy/Start/Stop Applications
<H1> D-Link DSL-2740B Multiple CSRF Vulnerabilities | CVE-2013-5730
<H1> Update on Google Translate CSRF Vulnerability | Google is fixing the issue
<H1> Translate.google.com | CSRF Vulnerability
<H1> D-Link DSL-2740B (ADSL Router) Authentication Bypass | CVE-2013-2271
<H1> Axous 1.1.1 Multiple Vulnerabilities (CSRF – Persistent XSS)
<H1> WordPress 3.3.1 Multiple CSRF Vulnerabilities
<H1> PlumeCMS
<H1> CMS Made Simple
<H1> SocialCMS
<H3> Post navigation
<H3> Real Time Tweets
<H3> Categories
<H3> Recent Posts
<H3> Archives
<H3> Calendar

Word cloud

http91
vulnerabilities36
web34
vulnerability33
www31
csrf22
osvdb22
security21
google21
posted20
advisory19
xss19
reply18
cve17
mitre17
multiple15
persistent13
parameters13
change13
post13
insert13
administrator12
nvd11
following11
nist11
new11
translate10
d-link10
code10
been10
leave9
original9
published9
via9
attacker9
authority8
numbering8
method8
php”8
team8
passed8
ibm8
iss8
xforce8
assigned8
x-force8
packetstormsecurity8
html8
all7
issue7
secunia7
parameter7
user7
authenticated7
sanitization7
below6
arbitrary6
storm6
exploiting6
due6

Keyword matrix

word	title	descriptions	heading
http
vulnerabilities
web
vulnerability
www
csrf

Two Word cloud

this vulnerability8
multiple csrf7
persistent xss7
mitre cve6
csrf vulnerability6
csrf vulnerabilities6

Three Word cloud

via http post6
mitre ibm x-force5
multiple csrf vulnerabilities5
for this vulnerability4
administrator could insert4
cve numbering authority3

404 Page

The website has a 404 error page.

Flash content

Good! The website does not have any flash contents.

Frame

Good! The website does not use iFrame solutions.

Images

We found 1 images on this web page.

Good! Every image has an alternative text attributes set on this website.

Readability

Flesch–Kincaid Grade Level

7.60

Flesch Reading Ease

53.50

Coleman Liau Index

12.00

Automated Readability Index (ARI)

5.70

Dale–Chall Readability

9.20

SMOG Index

10.20

Spache Readibility

5.00

Number of letters

10898

Number of words

2180

Number of sentences

306

Average words per sentences

Number of syllables

3766

Syllables in words

3581

Average syllables in words

1.73

Number of words in first three syllables

449

Percentage of word / syllables

20.60

Words not in Dale-Chall easy-word list

1222

Words not in Spache easy-word list

369

Technologies

Deprecated HTML elements

Good! No deprecated HTML tags are detected.

Redirection (www / not www)

Error! The web address is accessible with and without www!

Deprecated HTML elements

Good! No deprecated HTML tags are detected.

Printability

Suggestion! Unfortunately, no printer-friendly CSS found.

Meta Tag (viewport tag, mobile devices)

Error! The meta tag named viewport is missing.

Speed test

Server response time

The server response time is not fast enough: 1.4 seconds have passed until the page started to load.

Table layout

Good! No nested tables found.

Number of HTTP resources

Number of source domains

Render blocking resources

The elements below are blocking the “above the fold” rendering.
List of render blocking css files

http://www.webapp-security.com/.. /style.css
http://www.webapp-security.com/.. /front_end_style.css?ver=4.4.5
http://www.webapp-security.com/.. /dashicons.min.css?ver=4.9.8
http://www.webapp-security.com/.. /mobile_style.css?ver=4.4.5

Speed test – Javascript

Javascript

Good! Just a few javascript files are detected on the website.

File size of all javascript files combined

831.63KB

Javascript minifying

Great! The Javascript files are minified.

Speed test – CSS

CSS

Good! Just a few CSS files are used on this website.

http://www.webapp-security.com/wp-content/themes/twentyeleven/style.css
http://www.webapp-security.com/wp-content/plugins/captcha/css/front_end_style.css?ver=4.2.8
http://www.webapp-security.com/wp-includes/css/dashicons.min.css?ver=4.2.15
http://www.webapp-security.com/wp-content/plugins/captcha/css/desktop_style.css?ver=4.2.8

File size of all css files combined

212.14KB

CSS minifying

You can save 3KB (26% compression) on the analysed URL by minifying the CSS files.

By minifying http://www.webapp-security.com/.. /style.css you can save 2.9KB (26% compression rate)
By minifying http://www.webapp-security.com/.. /front_end_style.css?ver=4.4.5 you can save 163B (23% compression rate)

Speed test – Compression

Uncompressed size of the of the HTML

173.95KB

Gzip compression

Your site uses compression.

Speed test – Browser cache

Number of static resources (image, JS, CSS)

Browser cache

The browser cache is not set correctly for all elements.

URL	Duration
http://www.webapp-security.com/.. /comment-bubble.png	Expiry time is not specified
http://www.webapp-security.com/.. /search.png	Expiry time is not specified
http://www.webapp-security.com/.. /style.css	Expiry time is not specified
https://cdn.syndication.twimg.com/.. /548436690264948736?callback=__twttr.call...	5 minutes
https://syndication.twitter.com/settings	10 minutes
http://platform.twitter.com/widgets.js	30 minutes
http://pagead2.googlesyndication.com/pagead/show_ads.js	60 minutes
http://www.google-analytics.com/ga.js	2 hours

Speed test – Images

File size of all images combined

156.81KB

Image optimisation

You can save 27.6KB (36% compression) by optimising the images below:

By lossless compressing the https://pbs.twimg.com/.. /osvdb_black_square_bigger.jpg you can save 14.1KB (88%) data.
By lossless compressing the https://tpc.googlesyndication.com/.. /15965689154833978772 you can save 6.9KB (18%) data.
By lossless compressing the https://pbs.twimg.com/.. /Z4u4GhWn?format=png&name=386x202 you can save 1.2KB (19%) data.
By lossless compressing the https://pbs.twimg.com/.. /Gm0c9PjE_bigger.jpg you can save 1KB (46%) data.
By lossless compressing the https://pbs.twimg.com/.. /Udy_XQ9f_bigger.jpg you can save 1,019B (33%) data.
By lossless compressing the https://pbs.twimg.com/.. /CpRWU4nu_bigger.jpg you can save 1,019B (39%) data.
By lossless compressing the https://pbs.twimg.com/.. /vlm9ASXv_bigger.jpg you can save 955B (40%) data.
By lossless compressing the https://pbs.twimg.com/.. /CZ0iBjLJ_bigger.png you can save 804B (20%) data.
By lossless compressing the https://pbs.twimg.com/.. /WMi3wRRJ_bigger.jpg you can save 752B (37%) data.

Links

We found a total of 185 different links.
Internal links: 90
External links: 95

External links:

Link text (anchor)	Link strength
Gianmarco Pirozzi
CVE-2013-6357
http://www.securityfocus.com/bid/63515
http://osvdb.org/show/osvdb/99375
http://packetstormsecurity.com/files/123894/Apache-Tomcat-5.5.25-Cross-Site-Request-Forgery.html
http://www.exploit-db.com/exploits/29435/
http://1337day.com/exploits/21455
http://www.scip.ch/en/?vuldb.11098
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6357
https://bugzilla.redhat.com/show_bug.cgi?id=1030090
http://www.cvedetails.com/cve/CVE-2013-6357/
http://xforce.iss.net/xforce/xfdb/88471
http://en.securitylab.ru/nvd/447679.php
http://www.us-cert.gov/ncas/bulletins/SB13-322
CVE-2013-5730
ttp://securityadvisories.dlink.com/security/publication.aspx?name=SAP10004
http://www.securityfocus.com/bid/62356/
http://secunia.com/advisories/54795
http://www.exploit-db.com/exploits/28239/
http://1337day.com/exploits/21225
http://osvdb.org/show/osvdb/97278
http://xforce.iss.net/xforce/xfdb/87036
http://packetstormsecurity.com/files/123200/D-Link-DSL-2740B-Cross-Site-Request-Forgery.html
http://www.securelist.com/en/advisories/54795
http://www.scip.ch/en/?vuldb.10296
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10004
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5730
http://cert-mu.gov.mu/English/Pages/Vulnerability%20Notes/2013/VN-2013-220.aspx
http://en.securitylab.ru/nvd/447902.php
Japan CERT (Computer Emergency Response Team)
Google Translate Cross Site Request Forgery
CVE-2013-2271
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2271
https://www.us-cert.gov/ncas/bulletins/SB13-329
http://www.securityfocus.com/bid/58266/info
http://1337day.com/exploits/20469
http://www.exploit-db.com/exploits/24563/
http://www.osvdb.org/show/osvdb/90822
http://cxsecurity.com/issue/WLB-2013030027
http://www.scip.ch/?vuldb.7851
http://www.eeye.com/resources/security-center/research/zero-day-tracker/2013/20130210
http://www.security-database.com/detail.php?alert=CVE-2013-2271
Japan CERT (Computer Emergency Response Team)
CVE-2012-2629
http://xforce.iss.net/xforce/xfdb/75675
http://osvdb.org/show/osvdb/82075
http://osvdb.org/show/osvdb/82076
http://osvdb.org/show/osvdb/82077
http://osvdb.org/show/osvdb/82078
http://osvdb.org/show/osvdb/82079
http://osvdb.org/show/osvdb/82080
http://packetstormsecurity.org/files/112748/Axous-1.1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
http://www.exploit-db.com/exploits/18886/
http://www.1337day.com/exploits/18277
CVE-2012-1936
http://www.securityfocus.com/bid/53280
http://osvdb.org/show/osvdb/81588
http://xforce.iss.net/xforce/xfdb/75222
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1936
http://packetstormsecurity.org/files/112253/WordPress-3.3.1-Cross-Site-Request-Forgery.html
http://1337day.com/exploits/18138
http://www.exploit-db.com/exploits/18791/
http://www.cvedetails.com/cve/CVE-2012-1936/
http://www.exploit-id.com/web-applications/wordpress-3-3-1-multiple-csrf-vulnerabilities
CVE-2012-2156
http://www.securityfocus.com/bid/52890
http://secunia.com/advisories/40133
http://xforce.iss.net/xforce/xfdb/74614
http://osvdb.org/show/osvdb/80960
http://osvdb.org/show/osvdb/80961
http://packetstormsecurity.org/files/111596/PlumeCMS-1.2.4-Cross-Site-Scripting.html
http://www.exploit-db.com/exploits/18699/
http://1337day.com/exploits/17963
http://www.thecybernuxbie.com/exploit-report/plumecms-1-2-4-multiple-persistent-xss.aspx
http://www.x-bug.com/exploits/221
CVE-2012-1992
http://osvdb.org/show/osvdb/80918
http://www.securityfocus.com/bid/52850/
http://xforce.iss.net/xforce/xfdb/74563
http://packetstormsecurity.org/files/111486/CMS-Made-Simple-1.10.3-Cross-Site-Scripting.html
http://1337day.com/exploits/17921
CVE-2012-1982
http://secunia.com/advisories/44313
http://osvdb.org/show/osvdb/80794
http://xforce.iss.net/xforce/xfdb/74540
http://xforce.iss.net/xforce/xfdb/74541
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1982
http://www.us-cert.gov/cas/bulletins/SB12-100.html
http://packetstormsecurity.org/files/111409/SocialCMS-1.0.2-Cross-Site-Scripting.html
http://www.securelist.com/en/advisories/44313
http://1337day.com/exploits/17895
http://www.cvedetails.com/cve/CVE-2012-1982/
Follow @ivanobinetti
Tweet di @IvanoBinetti
Ivano Binetti @2010-2014

Internal links:

Link text (anchor)	Link strength
Ivano Binetti
Skip to primary content
Skip to secondary content
Home
About Me
My Publications
Contacts
← Older posts
Apache Tomcat 5.5.25 Deploy/Undeploy/Start/Stop Applications
November 4, 2013
Reply
0day Vulnerabilities
Bugtraq ID - Security Focus
CVE MITRE
IBM X-Force
Inj3ct0r
NIST - NVD
OSVDB
Packet Storm
web
Web Vulnerabilities
Leave a reply
D-Link DSL-2740B Multiple CSRF Vulnerabilities \| CVE-2013-5730
September 8, 2013
Reply
Kaspersky Lab
Secunia
Uncategorized
Leave a reply
Update on Google Translate CSRF Vulnerability \| Google is fixing the issue
September 1, 2013
Reply
read my previous post on this topic
Google
Leave a reply
Translate.google.com \| CSRF Vulnerability
June 21, 2013
Reply
Leave a reply
D-Link DSL-2740B (ADSL Router) Authentication Bypass \| CVE-2013-2271
March 1, 2013
Reply
Leave a reply
Axous 1.1.1 Multiple Vulnerabilities (CSRF – Persistent XSS)
May 15, 2012
Reply
Leave a reply
WordPress 3.3.1 Multiple CSRF Vulnerabilities
April 26, 2012
2
2 Replies
PlumeCMS
April 4, 2012
Reply
Leave a reply
CMS Made Simple
April 2, 2012
Reply
Leave a reply
SocialCMS
March 30, 2012
Reply
Leave a reply
Browser
Bugtraq ID – Security Focus
ftp
hardware
Javascript
Linux bash
Metasploit
Netcat
NIST – NVD
Perl
November 2013
September 2013
June 2013
March 2013
May 2012
April 2012
March 2012
February 2012
January 2012
October 2011
June 2011
March 2011
January 2011
December 2010
November 2010
October 2010
« Nov

Website security

62.149.142.75

External hidden links

Good! No hidden external links found

Looking for eval()

Good! No eval(bas64_decode()) scripts are found

Checking for XSS vulnerability

No XSS vulnerability found

Email encryption

Good! We have not found any unencrypted email addresses.

Sites on same ip

azrent.it

photoecommerce.it

abcedesign.it

bikeadventure.it

ac-edilhouse.it

lesirenehotel.it

energiaconcorrente.com

hoteladria-bz.it

learn3d.it

Icons

Favicon

Error! No favicon is found. Using favicon helps to build a better brand quicker.

Typos

ebapp-security.com, wqebapp-security.com, qebapp-security.com, waebapp-security.com, aebapp-security.com, wsebapp-security.com, sebapp-security.com, wdebapp-security.com, debapp-security.com, weebapp-security.com, eebapp-security.com, w1ebapp-security.com, 1ebapp-security.com, w2ebapp-security.com, 2ebapp-security.com, w3ebapp-security.com, 3ebapp-security.com, wbapp-security.com, wewbapp-security.com, wwbapp-security.com, wesbapp-security.com, wsbapp-security.com, webapp-security.com, wbapp-security.com, wedbapp-security.com, wdbapp-security.com, wefbapp-security.com, wfbapp-security.com, werbapp-security.com, wrbapp-security.com, we3bapp-security.com, w3bapp-security.com, we4bapp-security.com, w4bapp-security.com, weapp-security.com, webvapp-security.com, wevapp-security.com, webfapp-security.com, wefapp-security.com, webgapp-security.com, wegapp-security.com, webapp-security.com, weapp-security.com, webhapp-security.com, wehapp-security.com, webnapp-security.com, wenapp-security.com, web app-security.com, we app-security.com, webpp-security.com, webaqpp-security.com, webqpp-security.com, webawpp-security.com, webwpp-security.com, webazpp-security.com, webzpp-security.com, webapp-security.com, webpp-security.com, webaxpp-security.com, webxpp-security.com, webaspp-security.com, webspp-security.com, webap-security.com, webapop-security.com, webaop-security.com, webaplp-security.com, webalp-security.com, webap0p-security.com, weba0p-security.com, webap-p-security.com, weba-p-security.com, webapp-security.com, webap-security.com, webap_p-security.com, weba_p-security.com, webap-security.com, webappo-security.com, webapo-security.com, webappl-security.com, webapl-security.com, webapp0-security.com, webap0-security.com, webapp--security.com, webap--security.com, webapp-security.com, webap-security.com, webapp_-security.com, webap_-security.com, webappsecurity.com, webapp-=security.com, webapp=security.com, webapp-_security.com, webapp_security.com, webapp-0security.com, webapp0security.com, webapp-+security.com, webapp+security.com, webapp-*security.com, webapp*security.com, webapp-9security.com, webapp9security.com, webapp-ecurity.com, webapp-sqecurity.com, webapp-qecurity.com, webapp-swecurity.com, webapp-wecurity.com, webapp-seecurity.com, webapp-eecurity.com, webapp-szecurity.com, webapp-zecurity.com, webapp-sxecurity.com, webapp-xecurity.com, webapp-scecurity.com, webapp-cecurity.com, webapp-scurity.com, webapp-sewcurity.com, webapp-swcurity.com, webapp-sescurity.com, webapp-sscurity.com, webapp-security.com, webapp-scurity.com, webapp-sedcurity.com, webapp-sdcurity.com, webapp-sefcurity.com, webapp-sfcurity.com, webapp-sercurity.com, webapp-srcurity.com, webapp-se3curity.com, webapp-s3curity.com, webapp-se4curity.com, webapp-s4curity.com, webapp-seurity.com, webapp-secxurity.com, webapp-secsurity.com, webapp-sesurity.com, webapp-security.com, webapp-seurity.com, webapp-secdurity.com, webapp-sedurity.com, webapp-secfurity.com, webapp-sefurity.com, webapp-secvurity.com, webapp-sevurity.com, webapp-sec urity.com, webapp-se urity.com, webapp-secrity.com, webapp-secuyrity.com, webapp-secyrity.com, webapp-secuhrity.com, webapp-sechrity.com, webapp-secujrity.com, webapp-secjrity.com, webapp-secukrity.com, webapp-seckrity.com, webapp-secuirity.com, webapp-secirity.com, webapp-secu7rity.com, webapp-sec7rity.com, webapp-secu8rity.com, webapp-sec8rity.com, webapp-secuity.com, webapp-secureity.com, webapp-secueity.com, webapp-securdity.com, webapp-secudity.com, webapp-securfity.com, webapp-secufity.com, webapp-securgity.com, webapp-secugity.com, webapp-secur4,ity.com, webapp-secu4,ity.com, webapp-securtity.com, webapp-secutity.com, webapp-secur5ity.com, webapp-secu5ity.com

More Sites

hotelvictoriana.com

Title: Hotel Victoriana
Description: null
Internet Protocol (IP) address:
Tech:
- Analytic
  - Google Analytics
- Other
  - CSS (Cascading Style Sheets)
  - Html (HyperText Markup Language)
  - Html5
  - Javascript
  - SVG (Scalable Vector Graphics)

lifekult.com

Title: NS5 Wokine
Description:
Sites loading time: 9131
Internet Protocol (IP) address:
Javascript total size: 0.00B
CSS total size: 0.00B
Image total size: 1.54KB
Total size: 1.90KB
Tech:
- Other
  - Html (HyperText Markup Language)

constructionfunda.com

Title: Extraordinary Task - Distribute & Increase knowledge
Description: Distribute & Increase knowledge
Internet Protocol (IP) address:
Tech:
- CMS
  - Wordpress CMS
- Other
  - CSS (Cascading Style Sheets)
  - Font Awesome
  - Html (HyperText Markup Language)
  - Html5
  - Javascript
  - jQuery
  - Php (Hypertext Preprocessor)
  - Pingback
  - SVG (Scalable Vector Graphics)

barontravel-mexico.com

Title: BARON TRAVEL & TOURS
Description:
Internet Protocol (IP) address:
Tech:
- Other
  - Carousel
  - CSS (Cascading Style Sheets)
  - Google Font API
  - Html (HyperText Markup Language)
  - Html5
  - Lightbox
  - SVG (Scalable Vector Graphics)

dmonlinebusiness.nl

Title: D & M Online Business
Description:
Internet Protocol (IP) address:
Tech:
- CMS
  - Wordpress CMS
- Analytic
  - Facebook Retargeting
- Social
  - Facebook Box
- Other
  - CSS (Cascading Style Sheets)
  - Datepicker
  - Fancybox
  - Font Awesome
  - Google Font API
  - Html (HyperText Markup Language)
  - Javascript
  - jQuery
  - jQuery Fancybox
  - jQuery UI
  - Php (Hypertext Preprocessor)
  - Pingback
  - Revslider
  - Swf Object

sport4kids.nl

Title: sport4kids.nl
Description:
Internet Protocol (IP) address:
Tech:
- Other
  - Html (HyperText Markup Language)

finestwebdesigns.com

Title: 王子畑康雅が伝える改貫日記
Description:
Internet Protocol (IP) address:
Tech:
- CMS
  - Wordpress CMS
- Other
  - CSS (Cascading Style Sheets)
  - Html (HyperText Markup Language)
  - Html5
  - Javascript
  - Php (Hypertext Preprocessor)
  - Pingback

acnovo-machine.tw

Title: ACNOVO TECHNOLOGY CORP.
Description:
Internet Protocol (IP) address:
Tech:
- Other
  - CSS (Cascading Style Sheets)
  - Html (HyperText Markup Language)
  - Javascript

josephinedesign.nl

Title: JEWELRY – BY JOSEPHINE | Crafted with care in The Netherlands
Description: | Crafted with care in The Netherlands
Internet Protocol (IP) address:
Tech:
- CMS
  - Wordpress CMS
- CDN
  - BootstrapCDN
- Other
  - CSS (Cascading Style Sheets)
  - Flexslider
  - Font Awesome
  - Html (HyperText Markup Language)
  - Html5
  - Javascript
  - Php (Hypertext Preprocessor)
  - Pingback
  - SuperFish
  - SVG (Scalable Vector Graphics)

scottiesautotransport.com

Title: Scotties Auto Transport | Tow Truck Service wrecker Manassas VA | Towing service Dependable Auto Shipper, Auto relocation Coast to coast long distance vehicle shipment. Prince William County Virginia
Description: Scotties of Manassas VA is the local and long distance towing company Northern VA residents and businesses call for all their car shipping or tow needs. If you need a dependable auto shipper or wrecker service for your vehicle relocation or coast to coast vehicle shipment call Scotties Auto transport.
Sites loading time: 15970
Internet Protocol (IP) address:
Javascript total size: 112.70KB
CSS total size: 3.71KB
Image total size: 2.48MB
Total size: 2.62MB
Tech:
- Other
  - CSS (Cascading Style Sheets)
  - Html (HyperText Markup Language)
  - Javascript
  - PageSpeed Module
  - Php (Hypertext Preprocessor)

SEO report of webapp-security.com