I am new to Security field and still learning how all the attacks works.
for my testing, I have implemented Apache 2.0 on a Cent OS virtual machine. I have created another machine using FreeBSD, where I have installed
honeyd to create
I have created another machine which supposedly is an attacker, where I have installed
nmap to perform network scan,
hping, while my apache webserver has nothing installed except Apache itself.
I am performing network scans in my network using nmap, and also performing tcp scans using
hping , and
hping. But without using any security on my Apache webserver machine, how would I know if my machine is vulnerable to any attack so i can install appropriate software ?
I searched on the internet and one website says to install
mod_security, but I don't know why I should install it since I don't understand what attacks raw
Apache server is vulnerable to.