Research on Nginx Security Configuration

0x00 test environment Operating System: CentOS6.5 Web server: Nginx1.4.6 Php version: Php5.4.26 0x01 Nginx Introduction Nginx itself cannot process PHP. It is only a web server. After receiving the request, if it is a php request, it is sent to the

How can we prevent IP information from being leaked and use hidden IP addresses?

CommentsAs an important identifier for Net users, IP addresses are the first thing hackers need to know. There are many methods to obtain IP addresses, such as using Ping commands in LAN, do not miss this article if you have security

Wi-Fi cracking + Intranet sniffing

Solve the WiFi problem of the girl next door and get the qq Weibo e-mail thought: first crack the Wi-Fi password, then the Intranet sniffing and man-in-the-middle attacks, get the sister's password or forge session sessions, log on to your account

Check which ip addresses crack your ssh password and the number of times

On the Internet, there are always boring people who constantly guess the passwords of others' servers every day! As the administrator of a linux server, we should know which IP addresses are constantly scanning our SSH ports to try brute force

How to delete old confence number

Problem: When the environment is upgraded from 10 to 13, in the controlpanel of lync 2013, I can only see two numbers in dial-in access number in conferencing, but when I initiate a meeting or directly access the https://dialin.domain.com, I find

Tips for restoring accidental deletion of files on your computer

Computer misoperations are a common problem. misoperations are natural misoperations that are not subject to the control of human subjective consciousness. They have the possibility and uncertainty of moving. According to the authoritative

ARP binding on the ASA firewall

Currently, my company uses all static IP addresses. There is an ASA5505 firewall in the company, in this firewall, some users must be restricted from using certain applications, such as QQ farms. To implement these functions, we need to bind ARP to

What Will WFAS bring to us?

WFAS is a host-type firewall built in windows server 2008. In the previous windows 2003 system, the Internet Connection Firewall (ICF) was used. By default, the firewall was disabled and some other reasons did not receive much attention. In the

What I see in system password cracking

Recently, some colleagues forgot the system password and were eager to use it. Instead, they turned to me to solve the problem for them. Finally, they finally solved the problem. They usually collected some information about the system password, we

Cisco Firewall-Application of ASA Security Device

Lab Environment1. prepare four virtual machines, use the windows 2003 system, configure the Web server and the Out server respectively, set up the site www.sjzz.com and www.out.com, and set up the DNS server on the Out server to parse www. sjzz.

A shell script that can monitor system resources

I just wrote a script to monitor system resources. You can study it.You can change the value of the front edge to the value you want to monitor,The variables before the execution of the monitoring script set the monitoring information and modify the

ASA5585 firewall IDC Data room mounting notes

ASA5585 firewall IDC Data room mounting notes   Preface:Currently, online gaming companies use ASA5520. When web websites are often attacked by others, 0.28 million connections are used up, resulting in abnormal services. This problem must be solved

Linux PAM & amp; PAM Backdoor

0x00 PAM Introduction PAM (Pluggable Authentication Modules) is an Authentication mechanism proposed by Sun. It provides dynamic link libraries and a set of unified APIs to separate the services provided by the system from the authentication methods

TMG Learning (III), firewall client authentication

The firewall wall client is also a Web proxy client by default. Why? After the firewall client is installed, the browser is automatically set to make the browser a Web proxy client of TMG. When the firewall client accesses http/https/ftp, it will

Password Technology at the core of information security

Data Encryption principles and systems Data Encryption The Data Encryption implemented on the computer, its encryption orDecryptionThe conversion is fromKeyControl implementation. Keyword) is based onPasswordThe system is randomly selected. It is

Network security-the first line of defense against cyber-crime

Password 1. Set a unique password for all your important accounts Set an independent password for all accounts, especially for important accounts such as email and online banking. You may have dozens of accounts online, and you cannot ensure that

Practically bypassing WEB Protection and SQL Injection rules of 360 website guard

During the test, the dongle intercepted the SQL query on the website where the dongle was used. However, the dongle was able to bypass the security and obtain the database information. For the protection device, if important information is obtained

WordPress xmlrpc. php Pingback defects and SSRF attacks

Two days ago, I got down because of web2hack.org and analyzed the reason. At that time, I had some ideas and wanted to keep track of them, but it was not clear. Later I found that WordPress was released in the latest version 3.5.1, I 've seen

Another injection of the API interface of the Ruili APP

The injection of the iphone app interface of receng may cause user information to be threatened. The vulnerability can be used to read server information through variables, and the administrator can fix the vulnerability to prevent malicious use by

Path Traversal Vulnerability Detection and Prevention

Web applications generally have system file operation functions, often used to submit parameters to specify the file name, such as: http://www.nuanyue.com/getfile=image.jgp when the server processing transferred image.jpg file name, the Web

Total Pages: 1330 1 .... 397 398 399 400 401 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.