The latest in tech, SysOps, personal growth, scripting, servers, virtualization and databases curated for you daily.
…to take with the detected threat. 9 Do not take any action. 10 Block the detected threat. (NULL) Apply action based on the Security Intelligence Update (SIU). This is the…
…means everything is OK. Also read: Disallow direct access to PHP files in wp-content/uploads/ How to: Determine installed .NET Framework versions WordPress .htaccess security best practices in Apache 2.4.6+ Send…
…essential resource for any sysadmin auditing Windows Server security. In Windows you install OpenSSL using winget or by using its installer file. See install OpenSSL in Windows for all the…
…and Stop-IISCommitDelay in action in my post IIS 10.0 FTP IP Security allow list. Conclusion starting IIS application pools conditionally In this article you learned how to start all stopped application…
…If you’re not running Joomla 3.6.5, at the time of this writing, then stop using Joomla entirely! Joomla (< 3.6.4) Account Creation/Elevated Privileges write-up and exploit Joomla 3.6.5 Security release…
In this post you’ll learn about setting up a Monit monitoring service for your websites and services. Monit is a free and open source service monitoring application which can perform…
…value –> <add name=”Cache-Control” value=”max-age=691200″ /> </customHeaders> </httpProtocol> </system.webServer> </configuration> Also read: Learn how to set an HSTS HTTP Strict-Transport-Security header Remove Server response header in IIS One-time donation Your…
…Control Panel > System and Security > System Click Advanced system settings, and click Settings… under Performance in System Properties In the Performance Options screen, click the tab Advanced, and…
…for this. Also ensure that Windows Defender Firewall with Advanced Security allows the connection. You can create a rule to allow incoming traffic on port 6000, or you can disable…
…generated connection string <add name=”modelEntities” connectionString=”metadata=res://*/Model.csdl|res://*/Model.ssdl|res://*/Model.msl; provider=MySql.Data.MySqlClient; provider connection string=”server=mysql.server.ext; User Id=mysqluser; Persist Security Info=True; database=mysqldb; password=mysqlpwd”” providerName=”System.Data.EntityClient” /> Correct connection string <add name=”modelEntities” connectionString=”metadata=res://*/Model.csdl|res://*/Model.ssdl|res://*/Model.msl; provider=MySql.Data.MySqlClient; provider connection string=’server=mysql.server.ext; User…
…Module. Using this module blocks access to the sendmail.php at an earlier stage and thus faster than using a URL Rewrite Module rewrite rule. <security> <requestFiltering> <denyUrlSequences> <add sequence=”sendmail.php” />…
…to some settings, but basically all you need is IIS URL Rewrite Module. Block BaiduSpider bot User-Agent in web.config <?xml version=”1.0″ encoding=”UTF-8″?> <configuration> <system.webServer> <httpProtocol> <customHeaders> <!– # Security related….
This is a very interesting read on how Dario Weißer (@haxonaut), cutz and Ruslan Habalov (@evonide) were able to find a PHP unserialize bug to exploit and gain remote code…
Do you need to tunnel Remote Desktop over SSH with PuTTY? Have you ever been in a situation where you needed to perform remote administration on a Windows Server, and…
Learn how to use .htaccess in Windows Server IIS. In this post I’ll provide you with some useful .htaccess URL rewrite examples. URL rewrite examples that you can use on…
In this post you’ll learn how to use OpenSSL to generate passwords – or create pseudorandom strings. Random strings you can use as secure passwords. Yes, hexadecimal and base64 strings…
When you host your PHP website on Windows Server IIS, you may receive an “No input file specified” error message, when a HTTP request is made to non-existing .php files….
Enabling Windows Defender per GPO failed with an error message: “Get-MpComputerStatus : The extrinsic Method could not be executed.“. Here is how to resolve this issue. Photo by Ed Hardie…
If you want to find out fast if your IIS webservers have EnableTrailerSupport enabled for https.sys in the registry, here is a small PowerShell method. All you have to do…
Using Windows Server File Server Resource Manager‘s File Screens you can block vulnerable WordPress plugins from being uploaded to your IIS web server. In the following example, you’ll learn how…