The latest in tech, SysOps, personal growth, scripting, servers, virtualization and databases curated for you daily.
…do. Tagged: #backdoor #mail #php #rce #sendmail More PHP security Here on Sysadmins of the North, I often post articles about PHP and security. You might find these interesting: WordPress…
…SendGrid is a company having their security options in place for secure mail sending. With security options you have to think about SPF, DNSSEC, StartTLS, encryption, authentication and account protection…
…on. Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide communication security over the Internet. They use asymmetric cryptography for authentication of key…
…Protip: while you’re at it read my important 4 security measurements for Windows Server & IIS. Also, verify you’ve disabled SSLv3, TLS 1.0, and TLS 1.1. Acunetix provides you with…
…forensic log analysis on Windows Server and IIS is mentioned as a reference, in the book Information Security Analytics: Finding Security Insights, Patterns, and Anomalies in Big Data, written by…
…Transfer Protocol whereby an SMTP client may log in using an authentication mechanism chosen among those supported by the SMTP server. What is Transport Layer Security (TLS)? Transport Layer Security…
…<httpRedirect enabled=”false” destination=”https://example.com” httpResponseStatus=”Permanent” /> Don’t forget to enable HTTP Strict-Transport-Security (HSTS) on IIS. HSTS improves security and prevents man-in-the-middle attacks, downgrade attacks, and cookie-hijacking. And there are a number…
…security and maintain performance. Windows Computer Maintenance Has Windows become very slow? In this article I discuss several Windows maintenance tasks that you can use to keep your computer’s performance…
…ones are: IIS-WebServerRole IIS-WebServer IIS-CommonHttpFeatures IIS-HttpErrors IIS-HttpRedirect Redirect HTTP to HTTPS IIS-ApplicationDevelopment IIS-Security IIS-RequestFiltering Remove IIS Server version HTTP Response Header “The length of the URL for this request exceeds…
…—- —– 1 DESKTOP-J… Accepted KB2267602 574MB Security Intelligence Update for Windows Defender Antivirus – KB2267602 (… 2 DESKTOP-J… Downloaded KB2267602 574MB Security Intelligence Update for Windows Defender Antivirus -…
…in Survive The Deep End: PHP Security: Release 1.0a1 (PDF): […] The options here are somewhat obvious, configuring PHP to use SSL properly is added complexity that programmers are tempted…
…add in the appropriate place: <security> <requestFiltering> <denyUrlSequences> <add sequence=”xmlrpc.php” /> </denyUrlSequences> </requestFiltering> </security> This blocks requests to /xmlrpc.php URL’s completely, meaning you cannot use a plugin like Jetpack, or…
…-TargetObject $p -ErrorAction Stop } $n } $Port = $portNumbers # netsh http show sslcert requires administrator privileges $principal = [Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent() if (-not $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { Write-Error -Message ‘Get-HttpSysSslBindings requires administrator…
…or OpenSSL to generate secure, random passwords easily. Storing passwords in a password manager like Bitwarden or Devolutions Hub enhances security. For added security, use GUIDs or password generators that…
…xmlprc.php attacks. Also read: WordPress .htaccess security best practices in Apache 2.4.6+ Log XMLRPC.php POST data to a log file – create a quick PHP logger Log WordPress XML-RPC brute-force…
…of manual key distribution while maintaining strict access control. This integration not only streamlines the workflow for sysadmins but also significantly strengthens the overall security posture of your hybrid environment….
…connectionstring examples, and as a bonus for ASP to MySQL too. Security Best Practices Never hardcode passwords in your production source code. While these examples show the full string for…
…0x800f0906 with DISM /Online /Cleanup-Image, PowerShell Install-WindowsFeature and SFC /scannow Some reports are available explaining Microsoft Security Bulletin MS14-046 broke DISM /Online /Cleanup-Image /RestoreHealth, PowerShell Install-WindowsFeature with -Source parameter, and…
…Improving Security by Reducing Attack Surface 🔒 IIS is a full-featured web stack – including HTTP, FTP, SMTP modules, logging, authentication systems, and more. If you’re not hosting websites, these…
I was surprised WordPress is not able to send email using an SMTP server out-of-the-box. Not to mention using TLS transport for security. A quick Google search showed me multiple…