User Panel
User Panel
User Panel
|
Posted: 6/21/2011 8:57:28 AM EDT
[#1]
I'm by no means some kind of security expert, but if there are documented exploits, wouldn't you just write code to exploit them?
|
|
|
|
Posted: 6/21/2011 9:03:04 AM EDT
[#2]
|
|
|
|
Posted: 6/21/2011 9:06:26 AM EDT
[#3]
mod-security is decent, but you will also want to learn how to make good .htaccess files to stop invalid client IDs, proxies, etc.
There are entire eBooks on the topic, and many pentest (Penetration Testing) forums/hacking forums that you can learn from. Never do a Pen Test on a system you do not have complete rights to, or full permission from the person with complete rights. Jail is getting more popular due to recent events. |
|
|
|
Posted: 6/21/2011 9:09:06 AM EDT
[#4]
Quoted: mod-security is decent, but you will also want to learn how to make good .htaccess files to stop invalid client IDs, proxies, etc. There are entire eBooks on the topic, and many pentest (Penetration Testing) forums/hacking forums that you can learn from. Never do a Pen Test on a system you do not have complete rights to, or full permission from the person with complete rights. Jail is getting more popular due to recent events. And I would avoid pentesting a production machine.  |
|
|
|
Posted: 6/21/2011 9:23:33 AM EDT
[#5]
Penetration testing is happening on an isolated machine not in Production state. No worries there.
Thanks for the comments so far. I am learning SQL injection, which a basic instance of mod_security seems to prevent against. Seems it stops globals too, although since php5 globals are disabled by default.
|
|
|
|
Posted: 6/21/2011 4:37:13 PM EDT
[#6]
Quoted:
Penetration testing is happening on an isolated machine not in Production state. No worries there. Thanks for the comments so far. I am learning SQL injection, which a basic instance of mod_security seems to prevent against. Seems it stops globals too, although since php5 globals are disabled by default.Best way to test security is to try to break into it. Being a member on certain forum for a while will net you a lot of code snippets for various stuff. Failing that, google each package and look for the "proof of concept" script, then, if you can stomach it, become a script kiddie and run the script once you ensure it is really ONLY a "proof of concept" and not a bot net thing. If any script gets through, patch everything related, which you should be doing weekly if not more. Subscribe to some security newsletters, there is a LOT of traffic, but you hear about zero day exploits in time to plug the hole before you become one of the victim statistics. |
|
|
|
Posted: 6/21/2011 6:29:29 PM EDT
[#7]
You could always put it outside the firewall, then post the IP on 4chan and label it the most secure server in the world
 |
|
|
Win a FREE Membership!
Sign up for the ARFCOM weekly newsletter and be entered to win a free ARFCOM membership. One new winner* is announced every week!
You will receive an email every Friday morning featuring the latest chatter from the hottest topics, breaking news surrounding legislation, as well as exclusive deals only available to ARFCOM email subscribers.
AR15.COM is the world's largest firearm community and is a gathering place for firearm enthusiasts of all types.
From hunters and military members, to competition shooters and general firearm enthusiasts, we welcome anyone who values and respects the way of the firearm.
Subscribe to our monthly Newsletter to receive firearm news, product discounts from your favorite Industry Partners, and more.
Copyright © 1996-2024 AR15.COM LLC. All Rights Reserved.
Any use of this content without express written consent is prohibited.
AR15.Com reserves the right to overwrite or replace any affiliate, commercial, or monetizable links, posted by users, with our own.
