Collaborate Disseminate
I am using x-frame-options sameorigin header to prevent some of my websites from being loaded in iframes. Is this a foolproof method to prevent iframe loading?
There have been several old threads on stackoverflow that discuss employing fra… Continue reading Is frame busting javascript required despite x-frame-options
For the past few weeks, I am observing a lots of visits from a specific user-agent – Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36 to one particular URL.
The user-agent … Continue reading Suspicious visits to one URL from same user-agent but from unique IPs
I am working on web application firewall rules that detect and block malicious IPs. So far I have employed rules that look for DOS or DDOS attacks by IPs and block them temporarily. Now, I have a query regarding RBL blacklists and VPN/Prox… Continue reading Should web application firewalls block IPs by RBL blacklists and VPN/Proxies. An overkill?
I am about to use OWASP CRS rules with mod_security on my WHM/cPanel enabled CentOS server (with apache). But I fear that accidentally Googlebot may be blocked by one rule or the other. After enabling OWASP CRS, If I add the below custom r… Continue reading mod_security with OWASP CRS: Custom rule for whitelisting googlebot
I am using VNC GUI client from my Desktop to connect to a remote (ubuntu) server, say S1. From the remote server (S1), I will be logging into another server (say S2) via SSH. Via VNC client, I will be typing in the SSH password of S2 on pu… Continue reading Is it safe to type a password in a VNC client connected to a server to access another server?