The remote-server tag has no wiki summary.
1
vote
1answer
59 views
Simple and secure remote installation method that accepts input via a web page?
When installing software on a remote server: Is it possible to let the admin (i.e. the user that installs the software) define admin username and password via a HTML page, in a secure manner?
...
-3
votes
0answers
70 views
Questions about Remote Access Trojans [closed]
I'm trying to learn penetration testing and IT security. And i have som questions about remote access trojans.
If you are trying to control a rat server from another network, you'll have to use the ...
-5
votes
1answer
50 views
LUG war games — suggested strategies? [closed]
My LUG on campus once in awhile holds a mock wargames on a VM. I'm trying to figure a way to get root access and make everyone else not be able to have root (king of he hill).
I have a few ideas, but ...
0
votes
2answers
110 views
Denial Of Service attack in asynchronous communication
Is Low rate DOS attack (unintended) possible through asynchronous communication? Consider this scenario:
I have a client server application were there is a WAN communication between the client and ...
1
vote
2answers
309 views
how safe is a home NAS with ssh access?
I'm thinking about acquiring a NAS from Synology (or QNap), these are pretty cool NAS and do much more than just storing files.
Some extras include:
ssh, ftp, telnet, mail servers
photo gallery ...
4
votes
1answer
87 views
Should I take care of mysql credentials?
My mysql server is configured to not allow remote connection.
Should I seriously care about mysql user and password in this case?
2
votes
2answers
322 views
I've just purchased a VPS to use for developing and managing my clients hosting packages. What necessary steps do I have to take?
The VPS is running CentOS and I have full access.
I only looked around using the cPanel installation and already disabled anonymous FTP access.
What other security risks are there with a default VPS ...
4
votes
1answer
117 views
Sulley - only using ASCII printable characters
I have a problem fuzzing FTP protocol. An example of a command fuzzed is the following data model, which should fuzz the "CWD [string]" command of the FTP protocol.
s_initialize('CWD')
...
1
vote
1answer
677 views
IIS password protected website
I have a website built upon windows IIS and to use password to protect the website and disable anonymous logon to that website, the ONLY way is to disable the anonymous logon in IIS and use a windows ...
3
votes
5answers
243 views
Securing data transfer between public network and personal accounts
I would be traveling soon and I am looking for all kinds of ways to encrypt the data transfer (usernames, passwords, emails ...) between the new networks to which I will connect my Laptop, that is ...
1
vote
1answer
989 views
Checklist for configuring WinRM Security settings on servers
WinRM has a very difficult to use command line interface and that leads me to believe some settings will be easily reconfigured, overlooked, and eventually exploited.
In other words, insecurity ...
3
votes
5answers
157 views
Testing C++ Algorithm On A Server
I am making a C++ testing server and want to do that compiled programs would:
not have access to read or write files.
not have access to open or connect through sockets.
not be able to work with ANY ...
3
votes
1answer
354 views
Saving connection parameters in an RDP file
For connecting to a remote Windows Server 2008 I use a standard Windows 7 RDP remote desktop connection. In an RDP dialog there is an option to save connection parameters to an RDP file to use it ...
11
votes
5answers
20k views
How to find out the IP address of email sender in Gmail
Gmail doesn't give the IP address of the sender in its mail headers for security reasons. I'd like to know whether there is some other way of getting the IP address of the sender.
Since Gmail ...
11
votes
3answers
246 views
Verifying server software integrity?
I'm trying to brainstorm a security scheme for the problem of verifying server software integrity. The domain of this problem is Game Servers built on Valve's Source Dedicated Servers. These servers ...
28
votes
6answers
9k views
Servers for penetration testing
I am learning to use Metasploit as part of one of my college lessons. As you may know there are software builds like NOWASP (Mutillidae) or Damn Vulnerable Linux that allow you to exercise on pentest ...
6
votes
7answers
551 views
If I suspect my server is compromised then should I disconnect it immediately or not? From Power or Network?
According to Mandiant, you should not:
Mistake #1: Immediately entering “remediaton mode” – also known as playing “Whack-A-Mole”
... as described here: http://blog.mandiant.com/archives/1525
...
11
votes
1answer
316 views
Is it secure to connect to a remote Windows Server using Remote Desktop only?
I have a Windows Server that I login to from my home. I only use the pre-installed Remote Desktop. Is this a secure way to remote login or should I improve it in some way? If I should improve it, ...
