Collaborate Disseminate
I tried a lot to solve the problem but the only problem is that I am can access the apache2 service with the same network but if i tried to access the apache2 within outside of network doesn’t working i tried many things but … Continue reading i have problem with service apache2 working only in same network kali linux but not working over wan [on hold]
is there any tools that I give it web server log (like Apache web server) and analyze it if there was any attack or not?
I don’t want to use SIEM.
If I use software like WAMP to test and develop my PHP websites, can someone access my computer and steal data or view my in-development websites, or even hack my computer?
If I use software like WAMP to test and develop my PHP websites, can someone access my computer and steal data or view my in-development websites, or even hack my computer?
I made a script that reads the log file of the modsec 3 module in apache.
It sends an email every 5 minutes with new triggers. I discovered that it is also possible to execute a script (e.g. send email) on a rule trigger (lin… Continue reading mod security rule to send email on every trigger
Hey i am getting 403 Forbidden when i go to plugin options.
Server : Apache2 (Ondrej)
PHP : 7.3-fpm
Error :
Forbidden You don’t have permission to access
/wp-admin/options-general.php on this server.
VH Config :
Ser… Continue reading Modsecurity blocking WordPress [migrated]
To ring in the new year, application security teams should resolve to implement more security into the development process, prioritize consumer trust and pay more attention to false negatives.
The post New Year, New Risks: 3 Application Security Resolutions You Should Adopt in 2019 appeared first on Security Intelligence.
Continue reading New Year, New Risks: 3 Application Security Resolutions You Should Adopt in 2019
I am with an ethical hacking course and I am trying to access from a Kali machine to another machine with remote Linux terminal (Tiny Linux version 3-4) and when doing a vulnerability scan with nmap I get the following servic… Continue reading Remote control of an Apache 2.2.21 machine and OpenSSH 7.2
I’m using ModSecurity WAF with Apache. I wanted to know if there’s a way I can restrict to only few browser agent type? I want to do this for two reasons:
Force the users to use an updated browser.
Deny reconnaissance. Thus… Continue reading Whitelisting browser agents in ModSecurrity
I have tried CSRF attack on web vulnerability application known as DVWA at my localhost and on kali linux OS. I have changed password on this application by using CSRF. It has collected following log entries in access log.
1… Continue reading What are the common features to identify CSRF attack from Apache log file?