Collaborate Disseminate
Recently i searched for a power point file in google. then i was redirected to many pages and ended up here. (Screenshot below)
the site is – m0zilla.site
is this site a virus what happens when we click anywhere ?
I found an obfuscated PHP-script in a log directory on a shared hosting, which had been given chmod 0777 by mistake.
The script in it’s original form looks like this:
$zowyb = ‘i#7uH0_ls5y4m*bcrovaptf-8d1x69\’3egkn’;
$hifcq = array();
$hif… Continue reading What does this obfuscated PHP script do? [duplicate]
How is it possible to block reflected XSS on common web servers, such as IIS, Apache HTTP Server and Nginx?
The Content-Security-Policy: reflected-xss filter doesn’t work on latest Chrome and X-XSS-Protection was removed from latest Chrome… Continue reading Blocking reflected XSS on common web servers
Source ip addresses can be spoofed. And because of IPv6 it is not enough to keep a look-up table of ip addresses that are excluded from visiting a website, because with ipv6 there are now enough ip addresses for a single sender to spoof to… Continue reading Best methods to mitigate DDOS with changing IP sources
I am using nginx as a reverse proxy with the following config:
location / {
resolver 1.1.1.1;
proxy_http_version 1.1;
proxy_pass http://webserver.example/$http_host$request_uri;
}
I have only static content hosted on the webse… Continue reading nginx reverse proxy traversals attacks
I would like to know if I can use my SSL certificates that I use on my website (based on nodejs and express) for access to mysql database remotely, or if it is better to create new certificate.
My webserver has access to the database by lo… Continue reading Can I use my HTTP/SSL certificate for mysql?
I’ve just deployed a barebones Apache server on Digital Ocean, only hosting static files. No PHP et al.
I’m not too bothered to see random exploit attempts, but 99% of the requests are of this similar format and I’d like to know what they … Continue reading What exploit is trying to be leveraged here? (Apache access.log)
I have a server running on AWS and a cPanel from cpanel.net;
the server is apache and the OS is centos 7
today and suddenly all my 10 websites were not responding and showing 521 error.
After a few minutes of investigation, I came to find … Continue reading My Home/user directory was wiped off from the server, can secure log help finding out how was it done or at least if it is a hack? [closed]
Are there any ways to serve a webpage locally without revealing IP to end users?
I’m configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the container and communicate with the web. I’m… Continue reading Docker container exposed port vulnerabilities on Debian server?