Questions tagged [security]
Security is not a product, but a process.
6,356
questions
0
votes
0answers
30 views
Best way to secure world-writable .shtml files written to by Perl?
The Perl script
I have a Perl script running on an old Debian 6 server (until I move to a new server) that opens an editable pane in an .shtml file, accepts only Creole markup input from a single ...
0
votes
0answers
11 views
Is it possible that personal access token is leaked thru' git log?
When cloning a Git repo with HTTPS URL, the password or access token can be put there in the URL after username, for example:
git clone https://USERNAME:PASS_OR_TOKEN@github.com/some-project.git
Is ...
github
0
votes
1answer
18 views
Suspicious ksoftirqd_1 process using high cpu
I run this webserver that serves data to a couple of apps. In the last couple of days I have noticed that some requests take some more time than usual, so I did a top to find out what's running and ...
0
votes
1answer
14 views
How do I use apt-get to install one update at a time?
I have inherited 15 servers running Ubuntu 16.04 and need to install security updates on them all.
I have been told by my manager to install them one at a time and then test the system to make sure ...
0
votes
0answers
58 views
Why AWS Cognito client secret is not “secret”
We are setting up SaaS server-to-server auth solution using AWS Cognito + API Gateway using oAuth2 Client credentials flow.
And one thing is totally bugging me - I can access App client secret in ...
1
vote
0answers
21 views
Disable general public key authentication but allow SSH via CA
I would like to disable general pubKey authentication on my server and only allow auth via signed SSH CA (cert authority).
To enable SSH via CA you add this line:
TrustedUserCAKeys /etc/ssh/trusted-...
0
votes
0answers
20 views
HAPROXY 2.0.6- Limiting Http Request Rate for DDOS Prevention using Stick Tables
I was trying to limit the http-request rate to backend nginx server via haproxy using
"stick-table" but as soon as i restart haproxyafter configuration it seems like"track-sc0"
is not ...
0
votes
0answers
22 views
Is there a security option on Linux servers that stops the submission of certain HTML tags in forms [closed]
One of our client's websites has started showing some strange behaviour. When a <form> tag is submitted on a form, the POST method seems to refuse to accept it. It produces the following error......
0
votes
1answer
25 views
Where is the audit policy stored on a Windows Server?
I'm trying to understand how Windows stores policies. As I understand it, local workstation policies can either be governed via Group Policy if in a domain, or local on the server if it isn't in a ...
0
votes
2answers
29 views
Configure Server for Webhosting Securely and Easily [closed]
I have worked with "servers" a lot in the form of simple webspaces. The last years I worked with basic commands on Linux, know SSH but I am far away from having solid knowledge with servers.
...
0
votes
0answers
10 views
How to update Security Vulnerability on Rhel Linux (CVE Vulnerability) [duplicate]
I got a new assignment to update security vulnerabilities on Linux Rhel, maybe here all my friends have gotten a similar case. Please share your knowledge for this Security Vulnerability Update.
Note:...
0
votes
0answers
37 views
Microsoft Log Event ID 4625 - Multiple logins failed account ended with $
Recently, we discovered that in some unknown cases windows generates multiple logons failed (log id 4625). In all cases, the linked account name ended with $ that means computer account login failed.
...
0
votes
1answer
19 views
CURL call is blocked due to suspected security breach
I am trying to extract list of cities from https://www.lalpathlabs.com/find-a-lab.aspx which can be extracted one by one by selecting different states.
To achieve that through a shell program, I ...
-1
votes
1answer
31 views
Is it a good idea to use a virtual machine as an external facing code repository server [closed]
I've already asked this question here but it died out with no conclusive answer.
Original question:
I've set up (installed git/configured certs (disabled password login)/synced repos) a debian box ...
0
votes
0answers
14 views
Azure security center recommendation: Perform volume maintenance tasks is set to Administrators
I'm working through the Azure Security Center recommendations for ISO 27001 and have a recommendation to ensure that 'Perform volume maintenance tasks' is set to 'Administrators'
The problem with ...
-2
votes
1answer
32 views
My website got defaced, how to find possible vulnerability? [duplicate]
Recently my internal company site got defaced, is it self hosted site on a VPS, I suspect it has something to do with outdated program we use (e. g. php-5.5.9 and apache 2.4), and also it ran off ...
-2
votes
0answers
15 views
EDIT button missing on file security tab
Edit button missing on file/folder security tab. Any idea?
Refer to picture, left dialog does not have edit button but right: https://i.stack.imgur.com/4ft1L.png
Thanks!
0
votes
0answers
9 views
Upload-only chrooted sftp access
I don't quite know the risks involved with my server setup.
I've opened my server up to the world with following setup, which aims to allow file uploads exclusively.
sshd_config:
Match User ...
-1
votes
1answer
53 views
Windows 10 - Shell commands for CTRL+Alt+Del not working
We have an icon with a target path of "explorer.exe shell:::{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}" which pulls up Windows Security window in order for users to select change password from an RDP ...
0
votes
1answer
30 views
Is there some mechanisms in PHP to assign “less trust” to scripts in a given dir?
I've attempted to ask this (in different ways) many times without ever getting a clear, real answer, nor even seem to be understood at all.
This has been a continuous worry and problem for me for ...
0
votes
0answers
21 views
Geo block specific file rather than entire site (Centos 7 with Nginx + Apache)
My servers run on Centos 7 with Nginx proxy and Apache 2.4 on the back end which is on a separate server. I'm also using Geo Blocking which has been working without issue and block several countries ...
0
votes
0answers
18 views
Is it good practice to use authorized_keys for authenticating as a technical user?
At work, I operate processes / services / applications using a technical user. currently my workflow involves ssh-ing onto the production server like
wirrbel@desktop % ssh udeploy@myservice
...
1
vote
3answers
69 views
Avoid to write clear password in a sh script
I'm writing shell script on my custom board. In this script I use openssl to encode file at runtime using this command:
openssl des3 -salt -in file.txt -out my_file.des3 -k my_password
Is there a ...
0
votes
0answers
22 views
Azure SQL PIM like access
We are implementing PIM across our Azure setup and whilst it works well I cannot see a way to restrict access to the SQL databases in a way that allows a user to request elevation to access the ...
0
votes
0answers
18 views
Manage service account password policy
I recently inherited a system with over 40 VMs, each may contains applications such as web server, database server, 3rd party application ect...
The authentication for these use domain authentication ...
0
votes
1answer
20 views
Is there a feasible method to find what IP addresses / servers my linux server is contacting?
I've had a request from my customer's overzealous IT admin for ALL the servers / ports that my deployed server box (physical) uses.
It's running a debian jessie, but that should be besides the point.
...
0
votes
1answer
29 views
Using HAProxy in docker with host network
When running HAProxy in a docker container, we can only see (and forward) the original client's IP when running the container with the --net=host option as described here.
Our question: Is this ...
0
votes
2answers
51 views
Configuring an Ubuntu 20.04 server
this is the first time I am setting up an Ubuntu server. It is going to run a low-usage app for a company but I want to make sure not to leave any security issues out.
1) I installed a fresh Ubuntu ...
0
votes
2answers
283 views
Registering multiple web sites as subfolders in the same azure app service
I want to create multiple web sites to be hosted in the same App service (something like cms). So, I will have in my app multiple web sites in different locations:
https://app_service/web/client1
...
0
votes
1answer
33 views
Strange Errors in Security and Compliance
I'm getting an odd error in many of my security and compliance pages, error is as follows or a varient of the same:
The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/...
1
vote
0answers
24 views
How to publish IPMI JNLP Java over a website
We have an isolated network with management IPs 10.0.0.0/24 there are several IPMI ports connected and would launch the JAVA JNLP for remote access.
If we are connected to this network we have no ...
0
votes
0answers
15 views
Can someone pont me to a definition of a Bonnet in a DDoS context?
I have a new access point with some built in Ai security features including some DDoS mitigation tools.
The site that explains the feature mentions that the access point could still be impacted by a ...
-2
votes
2answers
112 views
Securing an AWS ALB
Hi everybody I’m relatively new to AWS web services and I’m struggling to secure an ALB. My web page works in a simple way there’s an api gateway where the methods are defined, then I have a ALB that ...
-2
votes
1answer
29 views
Which kind of proxy service should I install on my dedicated web server? [closed]
I have a dedicated server and would like to install proxy on my server so that I secure it. I'm not sure which type of proxy is suitable for me. Any help clarifying what is web proxy and what is the ...
1
vote
3answers
36 views
AD ESAE/Red Forest primary responsibilities and critical restrictions
In Microsoft’s Securing Privileged Access Reference material it states:
Tier 0 administrator - manage the identity store and a small number of systems that are in effective control of it, and:
Can ...
0
votes
0answers
21 views
Need feature name: ethernet switch recognizes manual cable disconnect and shuts down the port
Once in a hospital's radiology department, we had this nifty security feature -- I just cannot remember the proper name to succeed at various search engines:
If a host's ethernet cable was ...
0
votes
1answer
21 views
Suspicious process 'find' running under user nobody
At startup I noticed my machine was under heavy load.
Opened up a terminal and top to find a process running the command find under user nobody that was using 90%+ of my memory.
I killed it ...
0
votes
0answers
36 views
Prevent .pdf files from being downloading but allow to view in browser
I have tried to search better solution on Google and on Serverfault and found too many questions and answers, but none of them was my solution. (E.g. prevent the browser from downloading doc docx and ...
0
votes
0answers
120 views
Xfinity gateway exposes MAC addresses and device names
The Xfinity Gateway at http://10.0.0.1/ on my network lists all connected devices including their names and MAC addresses? Anyone can see these without having to enter admin credentials. Is there a ...
0
votes
2answers
45 views
Should servers use proxy for security?
I have set up proxy (using Sophos gateway) for PC's and we are using whitelist (so users can only access web pages that are allowed).
Is it good security practise to use proxy on servers too?
What ...
0
votes
0answers
33 views
How to prevent DDoS taking place from my server?
I had originally asked this question on https://networkengineering.stackexchange.com/ but was redirected here.
This is an informational question and I am not facing any DDoS attack of any sort. I was ...
0
votes
1answer
29 views
at Kali Linux how to get the library of specific command of package
how can i know the required library for a specific package or a specific command
For example :
when i write
apt-get install build-essentials i get a msg ( command not found or unable to locate )
so ...
3
votes
2answers
429 views
Remote Desktop Authentication without NTLM - How to Configure from non-Windows clients?
Background
This has been bugging me for quite a while (and no amount of internet searching has amounted to a decent solution), so I'm hoping someone can offer some sage advice. When I try and start a ...
0
votes
0answers
44 views
Certificate Warning Whenever Accessing Security-Type Websites
I have some malware on my network and I'm trying to figure out how I can get rid of it. There are a lot of problems but I can't access https://nordvpn.com or https://disa-storefront.disa.mil/dsf/logon?...
0
votes
1answer
32 views
ONLY allow HTTPS, HTTP and Postgres Outgoing ports
I have Ubuntu server and I ONLY want to allow outgoing connections to ANY IP to the following:
HTTPS
HTTP
Postgres
I want to block all other ports. And I would like to see connections being made ...
0
votes
0answers
7 views
DNSoverTLS for upstream recursion requests in Bind9/Stunnel
There is a lot of information out there about DNSoverTLS and different combinations of setups, and I've slowly been going through different combinations to get the right setup for us, but it's led to ...
2
votes
1answer
74 views
IIS rewrite rule to black-hole URL's with an apostrophe
I bought a web app that does not use special characters. In reviewing my logs, I am seeing probing by threat actors who attempt to see if my site is vulnerable to SQL injection by adding apostrophes ...
1
vote
1answer
81 views
200 status for requests from IP not allowed by htaccess?
I have a Debian 9 server which is continually beaten on by bots. I check the access logs for 200s every day just to be sure my countermeasures are working. The logs are full of 403 status requests ...
0
votes
0answers
28 views
For authentication of MongoDB: How to limit the number of login attempts? How to set session timeout?
I am designing security policies for databases.
Is there any way to limit the number of login attempts to protect DB from brute-force attacks?
For example, user have to wait for 2 minutes after 3 ...
0
votes
0answers
14 views
Secure Sendmail against Backscatter
I'm running Sendmail 8.15.2 on Debian 10.3. My server is again and again blacklisted on backscatterer.org (normally it's listed, after four weeks it's delisted again, but three or four weeks later it'...
