Collaborate Disseminate
I have to redirect the request that a Apache web server receives, using the user_agent to filter.
The idea is that if the user_agent is "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/1… Continue reading Redirect to other ip but the same query whit Apache mod_rewrite [migrated]
I am trying to redirecto to other machine by filtering the user agent in a apache web server. I have a web server in the machine with the ip 192.168.2.11, but this web server only should send the page to the requests WITHOUT this user agen… Continue reading apache mod_write RewriteCond %{HTTP_USER_AGENT} Doesn’t works
I just noticed in my access.log several POST requests coming from a (hidden) registration sub page that is not accessible via any link. A ‘hacker’ seems to have posted a form from there (manually it seems), using a random email as input. I… Continue reading IP address in access.log is incorrect and likely hacked
Here’s what you need to know – plus some sensible advice for all the devices on your home or small biz network! Continue reading QNAP warns of new bugs in its Network Attached Storage devices
I tried the settings below to remove the CBC cipher suites in Apache server,
SSLProtocol -all +TLSv1.2 +TLSv1.3
SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1… Continue reading How do I remove/disable the CBC cipher suites in Apache server?
I have an apache server with ModSecurity. I need to block all IPs except for a few ones.
The list of IPs is like this:
194.83.128.0/21
191.143.32.0/19
145.126.72.0/21
101.28.248.0/22
40.64.64.0/22
180.11.124.0/22
190.230.64.0/18
109.154.0…. Continue reading ModSecurity: Block all IPs except for a list of defined IPs
i am trying to secure my apache web server myself before go live so i added these security headers to my apache site.conf file after lot of reading and googling. i know we can not secure a server 100% but 99% i know there are lot of securi… Continue reading securing apache webserver using security headers
We are working in an environment where UI Requests flow to a WildFly Server (where the WAR is deployed) version 10.1.0 via an Apache Web Server version 2.4
We were running Security tests and when using a VirtualDirContext, it was possible … Continue reading Information Disclosure issue in WildFly and Apache Web Server
It seems there’s a service for everything, but sometimes you simply learn more by doing it yourself. If you haven’t enjoyed the somewhat anachronistic pleasures of running your own server …read more Continue reading Run Your Own Server for Fun (and Zero Profit)
My Apache web server logs suffer from the dreaded [ssl:error] AH02032: Hostname www.example.com provided via SNI and hostname example.com provided via HTTP are different.
I know what it means and why it happens.
I need to manually reproduc… Continue reading How to manually connect to my web server and send a TLS handshake with a hostname, followed by the HTTP request headers with a different hostname