Collaborate Disseminate
What version of TLS would be required for a router that separates client requests from a web server behind a router?
Let’s say the supported TLS client is 1.2 and so is the web server, BUT the router doesn’t support TLS 1.2, it’s only 1.0…. Continue reading Web request TLS
Currently, I have modem with built-in NAT and DMZ. I have 250Mb of webspace and unlimited emails supplied by my ISP on WAN. I want to move the webspace to my own PC on a LAN along with the emails so I can change ISP to a faster fibre. BUT … Continue reading Where is the safest place to put servers
Lately I’ve been experiencing some crashes related to my internet connection, I’m on the process of pin-pointing what is causing the issue and one of those possible causes might be a DDoS attack, mostly because of the symptoms resemble wha… Continue reading Does a DDoS Attack affect the internet connection apart from the service it’s attacking?
I have public webserver serving static html pages and when analyzing error logs I found type of attempted GET that I don’t understand.
They are formed like this and fail because request is too long:
/data=04|01|firstname.lastname@example.c… Continue reading Trying to understand HTTP request containing base64 encoded part and email address
I have a hypothetical server and client app.
The server needs to know if a POST request came from my custom client application or regular browser.
what can i do to check who made a request. I mean I want it to be secure so changing user-ag… Continue reading http request authorization [duplicate]
I am working in a private company as VAPT Auditor. I am currently testing one of our project website which contains common features like login, sign up, etc. I mostly do manual testing using BurpSuite and etc but sometimes I also use autom… Continue reading How spamming entries in website database using the same IP address is possible?
So essentially I do not want people to be able to access my NGINX site, unless it is through the domain name. I have a flask instance running that controls the requests. Anyways I have used this command,
server {
listen 80 default_ser… Continue reading Disabling an IP based access to my NGINX site [migrated]
I have a web server. I was investigting why my nginx is keep crashing. I noticed a few other issues in my logs.
Note: In the log report, I replace the name of my website with example.com and my second domain with example2.com and my server… Continue reading Is my website under attack?
I want to know client information when accessing my website as an identifier so I can filter who are deserve to access my website.
So far I only know this useful information from client those are User-Agent and Client Public IP Address.
Wh… Continue reading What are the most common client info when accessing website?
I am monitoring CPU utilization on Ubuntu Apache. I’ve found that when the HTTP GET Flood is far from reaching Apache’s bottleneck, the CPU utilization goes up. However, continue to increase the number of malicious HTTP requests. When it s… Continue reading How does CPU utilization change on Apache under HTTP GET Flood (DDoS)?