Questions tagged [security]

Security is not a product, but a process.

Filter by
Sorted by
Tagged with
0
votes
0answers
30 views

Best way to secure world-writable .shtml files written to by Perl?

The Perl script I have a Perl script running on an old Debian 6 server (until I move to a new server) that opens an editable pane in an .shtml file, accepts only Creole markup input from a single ...
0
votes
0answers
11 views

Is it possible that personal access token is leaked thru' git log?

When cloning a Git repo with HTTPS URL, the password or access token can be put there in the URL after username, for example: git clone https://USERNAME:PASS_OR_TOKEN@github.com/some-project.git Is ...
0
votes
1answer
18 views

Suspicious ksoftirqd_1 process using high cpu

I run this webserver that serves data to a couple of apps. In the last couple of days I have noticed that some requests take some more time than usual, so I did a top to find out what's running and ...
0
votes
1answer
14 views

How do I use apt-get to install one update at a time?

I have inherited 15 servers running Ubuntu 16.04 and need to install security updates on them all. I have been told by my manager to install them one at a time and then test the system to make sure ...
0
votes
0answers
58 views

Why AWS Cognito client secret is not “secret”

We are setting up SaaS server-to-server auth solution using AWS Cognito + API Gateway using oAuth2 Client credentials flow. And one thing is totally bugging me - I can access App client secret in ...
1
vote
0answers
21 views

Disable general public key authentication but allow SSH via CA

I would like to disable general pubKey authentication on my server and only allow auth via signed SSH CA (cert authority). To enable SSH via CA you add this line: TrustedUserCAKeys /etc/ssh/trusted-...
0
votes
0answers
20 views

HAPROXY 2.0.6- Limiting Http Request Rate for DDOS Prevention using Stick Tables

I was trying to limit the http-request rate to backend nginx server via haproxy using "stick-table" but as soon as i restart haproxyafter configuration it seems like"track-sc0" is not ...
0
votes
0answers
22 views

Is there a security option on Linux servers that stops the submission of certain HTML tags in forms [closed]

One of our client's websites has started showing some strange behaviour. When a <form> tag is submitted on a form, the POST method seems to refuse to accept it. It produces the following error......
0
votes
1answer
25 views

Where is the audit policy stored on a Windows Server?

I'm trying to understand how Windows stores policies. As I understand it, local workstation policies can either be governed via Group Policy if in a domain, or local on the server if it isn't in a ...
0
votes
2answers
29 views

Configure Server for Webhosting Securely and Easily [closed]

I have worked with "servers" a lot in the form of simple webspaces. The last years I worked with basic commands on Linux, know SSH but I am far away from having solid knowledge with servers. ...
0
votes
0answers
10 views

How to update Security Vulnerability on Rhel Linux (CVE Vulnerability) [duplicate]

I got a new assignment to update security vulnerabilities on Linux Rhel, maybe here all my friends have gotten a similar case. Please share your knowledge for this Security Vulnerability Update. Note:...
0
votes
0answers
37 views

Microsoft Log Event ID 4625 - Multiple logins failed account ended with $

Recently, we discovered that in some unknown cases windows generates multiple logons failed (log id 4625). In all cases, the linked account name ended with $ that means computer account login failed. ...
0
votes
1answer
19 views

CURL call is blocked due to suspected security breach

I am trying to extract list of cities from https://www.lalpathlabs.com/find-a-lab.aspx which can be extracted one by one by selecting different states. To achieve that through a shell program, I ...
-1
votes
1answer
31 views

Is it a good idea to use a virtual machine as an external facing code repository server [closed]

I've already asked this question here but it died out with no conclusive answer. Original question: I've set up (installed git/configured certs (disabled password login)/synced repos) a debian box ...
0
votes
0answers
14 views

Azure security center recommendation: Perform volume maintenance tasks is set to Administrators

I'm working through the Azure Security Center recommendations for ISO 27001 and have a recommendation to ensure that 'Perform volume maintenance tasks' is set to 'Administrators' The problem with ...
-2
votes
1answer
32 views

My website got defaced, how to find possible vulnerability? [duplicate]

Recently my internal company site got defaced, is it self hosted site on a VPS, I suspect it has something to do with outdated program we use (e. g. php-5.5.9 and apache 2.4), and also it ran off ...
-2
votes
0answers
15 views

EDIT button missing on file security tab

Edit button missing on file/folder security tab. Any idea? Refer to picture, left dialog does not have edit button but right: https://i.stack.imgur.com/4ft1L.png Thanks!
0
votes
0answers
9 views

Upload-only chrooted sftp access

I don't quite know the risks involved with my server setup. I've opened my server up to the world with following setup, which aims to allow file uploads exclusively. sshd_config: Match User ...
-1
votes
1answer
53 views

Windows 10 - Shell commands for CTRL+Alt+Del not working

We have an icon with a target path of "explorer.exe shell:::{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}" which pulls up Windows Security window in order for users to select change password from an RDP ...
0
votes
1answer
30 views

Is there some mechanisms in PHP to assign “less trust” to scripts in a given dir?

I've attempted to ask this (in different ways) many times without ever getting a clear, real answer, nor even seem to be understood at all. This has been a continuous worry and problem for me for ...
0
votes
0answers
21 views

Geo block specific file rather than entire site (Centos 7 with Nginx + Apache)

My servers run on Centos 7 with Nginx proxy and Apache 2.4 on the back end which is on a separate server. I'm also using Geo Blocking which has been working without issue and block several countries ...
0
votes
0answers
18 views

Is it good practice to use authorized_keys for authenticating as a technical user?

At work, I operate processes / services / applications using a technical user. currently my workflow involves ssh-ing onto the production server like wirrbel@desktop % ssh udeploy@myservice ...
1
vote
3answers
69 views

Avoid to write clear password in a sh script

I'm writing shell script on my custom board. In this script I use openssl to encode file at runtime using this command: openssl des3 -salt -in file.txt -out my_file.des3 -k my_password Is there a ...
0
votes
0answers
22 views

Azure SQL PIM like access

We are implementing PIM across our Azure setup and whilst it works well I cannot see a way to restrict access to the SQL databases in a way that allows a user to request elevation to access the ...
0
votes
0answers
18 views

Manage service account password policy

I recently inherited a system with over 40 VMs, each may contains applications such as web server, database server, 3rd party application ect... The authentication for these use domain authentication ...
0
votes
1answer
20 views

Is there a feasible method to find what IP addresses / servers my linux server is contacting?

I've had a request from my customer's overzealous IT admin for ALL the servers / ports that my deployed server box (physical) uses. It's running a debian jessie, but that should be besides the point. ...
0
votes
1answer
29 views

Using HAProxy in docker with host network

When running HAProxy in a docker container, we can only see (and forward) the original client's IP when running the container with the --net=host option as described here. Our question: Is this ...
0
votes
2answers
51 views

Configuring an Ubuntu 20.04 server

this is the first time I am setting up an Ubuntu server. It is going to run a low-usage app for a company but I want to make sure not to leave any security issues out. 1) I installed a fresh Ubuntu ...
0
votes
2answers
283 views

Registering multiple web sites as subfolders in the same azure app service

I want to create multiple web sites to be hosted in the same App service (something like cms). So, I will have in my app multiple web sites in different locations: https://app_service/web/client1 ...
0
votes
1answer
33 views

Strange Errors in Security and Compliance

I'm getting an odd error in many of my security and compliance pages, error is as follows or a varient of the same: The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/...
1
vote
0answers
24 views

How to publish IPMI JNLP Java over a website

We have an isolated network with management IPs 10.0.0.0/24 there are several IPMI ports connected and would launch the JAVA JNLP for remote access. If we are connected to this network we have no ...
0
votes
0answers
15 views

Can someone pont me to a definition of a Bonnet in a DDoS context?

I have a new access point with some built in Ai security features including some DDoS mitigation tools. The site that explains the feature mentions that the access point could still be impacted by a ...
-2
votes
2answers
112 views

Securing an AWS ALB

Hi everybody I’m relatively new to AWS web services and I’m struggling to secure an ALB. My web page works in a simple way there’s an api gateway where the methods are defined, then I have a ALB that ...
-2
votes
1answer
29 views

Which kind of proxy service should I install on my dedicated web server? [closed]

I have a dedicated server and would like to install proxy on my server so that I secure it. I'm not sure which type of proxy is suitable for me. Any help clarifying what is web proxy and what is the ...
1
vote
3answers
36 views

AD ESAE/Red Forest primary responsibilities and critical restrictions

In Microsoft’s Securing Privileged Access Reference material it states: Tier 0 administrator - manage the identity store and a small number of systems that are in effective control of it, and: Can ...
0
votes
0answers
21 views

Need feature name: ethernet switch recognizes manual cable disconnect and shuts down the port

Once in a hospital's radiology department, we had this nifty security feature -- I just cannot remember the proper name to succeed at various search engines: If a host's ethernet cable was ...
0
votes
1answer
21 views

Suspicious process 'find' running under user nobody

At startup I noticed my machine was under heavy load. Opened up a terminal and top to find a process running the command find under user nobody that was using 90%+ of my memory. I killed it ...
0
votes
0answers
36 views

Prevent .pdf files from being downloading but allow to view in browser

I have tried to search better solution on Google and on Serverfault and found too many questions and answers, but none of them was my solution. (E.g. prevent the browser from downloading doc docx and ...
0
votes
0answers
120 views

Xfinity gateway exposes MAC addresses and device names

The Xfinity Gateway at http://10.0.0.1/ on my network lists all connected devices including their names and MAC addresses? Anyone can see these without having to enter admin credentials. Is there a ...
0
votes
2answers
45 views

Should servers use proxy for security?

I have set up proxy (using Sophos gateway) for PC's and we are using whitelist (so users can only access web pages that are allowed). Is it good security practise to use proxy on servers too? What ...
0
votes
0answers
33 views

How to prevent DDoS taking place from my server?

I had originally asked this question on https://networkengineering.stackexchange.com/ but was redirected here. This is an informational question and I am not facing any DDoS attack of any sort. I was ...
0
votes
1answer
29 views

at Kali Linux how to get the library of specific command of package

how can i know the required library for a specific package or a specific command For example : when i write apt-get install build-essentials i get a msg ( command not found or unable to locate ) so ...
3
votes
2answers
429 views

Remote Desktop Authentication without NTLM - How to Configure from non-Windows clients?

Background This has been bugging me for quite a while (and no amount of internet searching has amounted to a decent solution), so I'm hoping someone can offer some sage advice. When I try and start a ...
0
votes
0answers
44 views

Certificate Warning Whenever Accessing Security-Type Websites

I have some malware on my network and I'm trying to figure out how I can get rid of it. There are a lot of problems but I can't access https://nordvpn.com or https://disa-storefront.disa.mil/dsf/logon?...
0
votes
1answer
32 views

ONLY allow HTTPS, HTTP and Postgres Outgoing ports

I have Ubuntu server and I ONLY want to allow outgoing connections to ANY IP to the following: HTTPS HTTP Postgres I want to block all other ports. And I would like to see connections being made ...
0
votes
0answers
7 views

DNSoverTLS for upstream recursion requests in Bind9/Stunnel

There is a lot of information out there about DNSoverTLS and different combinations of setups, and I've slowly been going through different combinations to get the right setup for us, but it's led to ...
2
votes
1answer
74 views

IIS rewrite rule to black-hole URL's with an apostrophe

I bought a web app that does not use special characters. In reviewing my logs, I am seeing probing by threat actors who attempt to see if my site is vulnerable to SQL injection by adding apostrophes ...
1
vote
1answer
81 views

200 status for requests from IP not allowed by htaccess?

I have a Debian 9 server which is continually beaten on by bots. I check the access logs for 200s every day just to be sure my countermeasures are working. The logs are full of 403 status requests ...
0
votes
0answers
28 views

For authentication of MongoDB: How to limit the number of login attempts? How to set session timeout?

I am designing security policies for databases. Is there any way to limit the number of login attempts to protect DB from brute-force attacks? For example, user have to wait for 2 minutes after 3 ...
0
votes
0answers
14 views

Secure Sendmail against Backscatter

I'm running Sendmail 8.15.2 on Debian 10.3. My server is again and again blacklisted on backscatterer.org (normally it's listed, after four weeks it's delisted again, but three or four weeks later it'...

1
2 3 4 5
128