Author Archives: alecxe

Is mod_reqtimeout a sufficient and safe technique to mitigate Slow HTTP DoS Attacks?

Posted on December 13, 2017 by alecxe

We’ve been looking into configuring apache against the Slow HTTP DoS Attacks and stumbled upon this article, which goes over multiple techniques and apache configuration options.

mod_reqtimeout module looks promising and we … Continue reading Is mod_reqtimeout a sufficient and safe technique to mitigate Slow HTTP DoS Attacks?→

Posted in Apache, DDoS, webserver

HTML login form without a CSRF protection

Posted on December 13, 2017 by alecxe

We’ve recently got a vulnerability report saying that one of our HTML forms in one of the internal applications is not CSRF protected. At first, we could not immediately reproduce it manually using the developer tools looking at the header… Continue reading HTML login form without a CSRF protection→

Posted in CSRF, Vulnerability, web-application

Newer posts →