Collaborate Disseminate
If I have a world writeable /etc/passwd file on a system, how can I escalate my privileges to root? I am currently a underprivileged user. The underlying OS is CentOS 7.2 in case you are wondering
I know that passwd file is … Continue reading Privilege escalation using passwd file
I have a VPS. To secure my VPS I followed this tutorial, but when I have to put these two lines in my iptables:
iptables -A INPUT -p tcp ! –syn -m state –state NEW -j DROP
iptables -I INPUT -m state –state ESTABLISHED,REL… Continue reading iptables: No chain/target/match by that name [migrated]
So I was debugging my code when I see these few lines in my log:
GET /cgi/common.cgi 302 8.015 ms – 23
GET /stssys.htm 302 2.928 ms – 23
GET / 200 134.922 ms – 9896
POST /command.php 302 33.826 ms – 23
GET /language/Swedish$… Continue reading What Does This Command Do? Should i be worried?
Since JBoss is acting as a middleware – Application Server – I was wondering if it’s still possible to face with File Inclusion attacks.(?) The reason I was wandering so is that in such a case, no request will be directly sen… Continue reading RFI – Is this possible even if you use an Application Server?
LetsEncrypt says to use CertBot. I’m following the instructions here
https://certbot.eff.org/#centos6-apache
but it gives an error.
[root@ip ~]# ./certbot-auto
Bootstrapping dependencies for RedHat-based OSes…
yum is /us… Continue reading How do I create a SSL certificate with LetsEncrypt with CertBot? "Could not install OS dependencies. Aborting bootstrap!" [migrated]
This question already has an answer here:
How do I deal with a compromised server?
5 answers
I have a dedicated webserver tha… Continue reading How can I investigate suspicious behavior on a server? [duplicate]
Where can I get a little vps with Debian, Ubuntu or CentOS?
Continue reading I want to run my own VPN but don’t have a server for that [on hold]
I read that Libnftnl is a userspace library providing a low-level netlink programming interface to the in-kernel nf_tables subsystem and it uses NFTables.
Since it’s a kernel related topic, at the very first time of hearing … Continue reading System-Level Network Security (Packet Classification and etc.) – SELinux and Libnftnl
Background
I have an issue on my server where some hole is allowing malicious PHP files to be written to any world-writable directories beneath the web root. It is not currently causing any harm, as I have all these director… Continue reading Determining httpd PHP Scripts with Auditd
I am using a CentOS running on a Cloud Hosted Virtual Machine. The cloud hosting service is Digital Ocean. The cloud hosted VM dose not allow you to use full hard disk encryption as it dose not provide the ability to enter a … Continue reading Using CentOS, is it OK to encrypt copies of root directories and mount the encrypted copies in place of the original root directories?