Questions tagged [hardening]
the process of tightening security on a system.
261
questions
0
votes
0answers
35 views
Secure a machine for pentesters [closed]
I'm trying to secure a Linux machine so that a pentester will not be able to exploit the machine in any way, shape, or form. The laptop will eventually host many services.
I know that there is no one ...
0
votes
2answers
96 views
Does VNC need hardening when inside LAN (home network)?
This is a very newbie question, but I would just like to make sure that I'm not missing anything: If I connect via VNC protocol to my various servers etc. inside my own LAN (home network), then should ...
0
votes
1answer
65 views
what are the best counter measures against reverse engineering of firmware? [closed]
How can I best prevent, that critical commandos (e.g. open garage door) from an IoT device are being reverse engineered from the firmware? Is the following list complete / do you spot any errors? Any ...
0
votes
1answer
130 views
The level of security regarding a TeamViewer host deployment
I'm a systems specialist in our organization and I've read a lot about TeamViewer security concerns over the last few years. Now I decided to come seek professional and objective opinions about the ...
1
vote
1answer
83 views
Way to remove rc4 from Linux Cipher Suites
Running this command resulted with the list of ciphers which supports rc4:
/usr/bin/openssl ciphers -v | grep -i "rc4"
What's the easiest way and how to remove specifically ciphers that ...
0
votes
1answer
59 views
How to implement zero trust concept on a pod running in Kubernetes?
Was thinking to use Ambassador design pattern and filter each request through Nginx with Waf (mod_security or Naxsi) in reverse proxy and ACL, authentication and authorization to pod.
What are the ...
3
votes
1answer
148 views
Is it possible to run commands that exist only on the host on a docker container?
We would like to harden our Docker Image and remove redundant software from it. Our Devs and Ops asked to keep some Linux tools used for debugging on the containers running on our Kubernetes Prod ...
1
vote
2answers
173 views
Secure a virtual machine during a lab exercise
I recently started the Offensive Security AWAE course.
On their connectivity guide page, they warn about the hazards of connecting to their labs:
you will be exposing your computers' VPN IP to other ...
0
votes
0answers
61 views
Hardening WMI: Any security beneifit to “winmgmt /standalonehost”? [duplicate]
Any security benefit to winmgmt operating outside of shared svchost processes via the command
winmgmt /standalonehost ?
As for security, yes, it is useful for changing wbem Authentication levels, ...
1
vote
0answers
140 views
Hardening WMI: Any security benefit to changing Impersonation level & separately, setting 'Winmgmt Standalonehost?'
Question #1 Does changing the Default Impersonation Level in WMI to "anonymous" or "identify" help mitigate against WMI exploitation, implants, and persistent threats on a local ...
6
votes
1answer
754 views
Hardening NFC tags for authentication
So I have a small electronics project where I am using common Mifare Classic 1K NFC tags as a means of authentication. (Mifare DesiFire is just too expensive)
I know these aren't very secure so here ...
1
vote
0answers
73 views
Setup guide for Privileged Access Workstation on Windows 10
I am setting up a Privileged Access Workstation (PAW) to access a whitelist of websites. Currently I have been following this guide on Github by unassassinable and applying the latest Windows 10 ...
1
vote
1answer
239 views
My WP site just got hacked for the third time even after following WP hardening guidelines
After the second hack, we did all the necessary things written here - https://wordpress.org/support/article/hardening-wordpress/ , https://security.stackexchange.com/a/180925 and we also changed the ...
0
votes
1answer
64 views
How can Linux service installation page create an attack surface?
Based on one of the lectures of Planning, Auditing and Maintaining Enterprise system course by Greg Williams (Department of computer science university of Colorado):
Let's say they were installing ...
2
votes
2answers
100 views
Does removing features from a library increase or reduce security risks?
Software libraries targetting resource constrained environments like embedded systems use conditional compilation to allow consumers to shave space and thus increase performance by removing unused ...
0
votes
0answers
191 views
Secure partitioning: does LVM affect hardening guidelines?
this is the second of a series of questions on hardening Linux servers at the filesystem level. The first is here. The same scenario applies; I copy it here for convenience:
At work I'm hardening an ...
0
votes
0answers
143 views
Secure mount options in Ubuntu CIS benchmarks too narrow?
this is the first of a series of questions on hardening Linux servers at the filesystem level.
At work I'm hardening an Ubuntu 18.04 Server following the CIS benchmark 2.0.1. Instead of just running ...
0
votes
1answer
135 views
How to safely reinstall Windows in Thailand - avoiding BadUSB/SSD
I have newly bought HP Pavilion laptop, which i am planning to nuke and reinstall.
I really do not like the bloatware as it might posses a security risk.
However, in Thailand, i do not trust the ...
0
votes
0answers
21 views
Newly bought HP Pavilion laptop - bloatware - security risks [duplicate]
I’ve recently bought a new HP Pavilion laptop, it came with pre-installed software (bloatware) such as various games and other useless stuff.
When setting up the laptop, i was connected to AIS, which ...
1
vote
1answer
172 views
IIS FTPS Best Practise
I have the task to place an FTP server in the company DMZ for our partners to store sensitive data that can not be sent by mail.
I have chosen the IIS FTPS. I will generate a self-signed certificate ...
0
votes
1answer
73 views
Restrict privileged users from accessing certain directories on Linux servers with Grsecurity?
My question is similar to these:
Protect sensitive data from sysadmin prying eyes
Restrict access to a specific directory on Linux
From those, I understand that SELinux could accomplish my goal. ...
1
vote
1answer
639 views
How to make it harder for a VPS provider to access my data?
I know it is impossible to completely prevent a host from accessing the data of a virtual machine (as noted here, here and here), but I think there is value in making it harder to do so. Bare metal ...
2
votes
1answer
105 views
Can a VPN provider or actors within its infrastructure access open ports on the client machine?
From my understanding of a VPN, it essentially creates a network between the two 'machines'. So if I have open ports (e.g. HTTP, SSH) on my client machine, those can be accessed by the VPN provider or ...
1
vote
0answers
88 views
Tightly locking down a FreeBSD jail
Suppose one is running a single internet-facing daemon, as a service in a FreeBSD jail, and expects targeted hostile attacks targeting open WAN ports and services.
Like many services, the service and ...
2
votes
0answers
75 views
Implications of adding work account to an android device
Once there's a primary Google account registered on the device and then another work account is added in order to access G Suite of the work place, what are the G Suite administrators are able to ...
1
vote
2answers
271 views
How to protect external hard drive from tampering?
I am looking to buy an external 1TB hard drive to store sensitive information on. External hard drives aren't (physically) small, and it may have to be left unattended at times.
What can I do to ...
1
vote
2answers
980 views
Hardening VM for Malware Analysis
I'm starting out in Malware Research / Malware Analysis. I am reading a book called "Practical Guide to Malware Analysis," which touches this in the 2nd chapter, before approaching Dynamical Analysis (...
1
vote
0answers
127 views
How should you configure PowerShell logs permissions?
I'm currently trying to figure out the best way to configure Windows PowerShell logging, so that
it is secure (Attackers cannot gain sensitive data out of it)
it helps in DFIR (digital forensic and ...
0
votes
1answer
393 views
For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?
Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables?
Assuming my public ip is known (and I don't want to change it), would it provide complete ...
0
votes
1answer
143 views
Hardening against Nmap and other network scanners
It is possible to make Server respond with irrelevant data if it is scanned with Nmap? If yes, are there any examples of such SW?
1
vote
1answer
86 views
RHEL7 SSGv0.1 2.2.3 Unauthorized SUID/GUID executables
We are upgrading to RHEL 7.6. My Nessus scanner is giving me the following message:
2.2.3.c-d Mandatory Review Required: Find unauthorized SUID/GUID System Executables
RHEL7 SSGv0.1 2.2.3 Unauthorized ...
1
vote
1answer
301 views
Why is autofs insecure?
I am hardening CentOS/RHEL 7.6. The hardening documents recommend disabling the automounter, "unless it is necessary."
Why is autofs such a problem?
One of the benefits of networking is a shared file ...
1
vote
1answer
858 views
Can I use a virtual machine to connect to a public WIFI to use Internet by totally isolating the host from it?
I want to use my laptop to connect to a public WiFi in a library but...
I have strong security in my Windows host machine (comodo firewall using a public network settings and rules, protocols ...
5
votes
2answers
373 views
What are some examples of viruses/exploits with benevolent purposes?
A comment from another user had me thinking. What are some well-known (or perhaps not quite so) examples of in-the-wild "malicious" software that do nothing actually malicious, but instead takes ...
1
vote
1answer
107 views
Steps to Harden Ancient Gaming Server
I am somewhat administering an old Windows Server 2008 server that is used to host a older Video Game.
It's in such a state that it has tons of custom code on it that run the server and hasn't really ...
2
votes
1answer
603 views
Is zeroing out values on the stack and arguments overkill?
I generally zero out memory the moment it's served its usefulness, but only with heap-allocated chunks. Is it a sin (or overkill) to do the same with arguments and stack values? Thanks in advance.
...
0
votes
0answers
54 views
How to protect certain macOS user directory from unauthorized access?
I have several directories on my Mac, two most popular examples are:
~/.aws
~/.ssh
They can be read by any script file or third-party app in system.
I do not see a way to protect them in macOS (...
3
votes
1answer
2k views
CIS hardening of alpine based docker container
I've got a service running inside a docker container. I've built my own image based on nginx:stable-alpine docker image.
I am trying to ascertain whether the concept of CIS hardening applies to the ...
1
vote
1answer
692 views
Is it a security risk to run master process of nginx as root?
I'm using nginx (Port 8888) as a reverse proxy for my web server running over 8080. In the traditional way, nginx master process runs as root and spawns the child processes with user www-data. Is it ...
2
votes
1answer
164 views
Shareable encrypted data in a web application
This is a follow up on my previous question about Storing sensitive, sharable data for a company where several of the employees have access to the server.
This solution has worked well for our ...
1
vote
1answer
184 views
WIN 10 hardening: Importance of “Allow system to be shut down without having to log on” policy
I am enforcing a hardening policy on my organization's work stations.
One of the policies I removed, under Shutdown, is called "Allow system to be shut own without having to log on".
Users started to ...
1
vote
2answers
61 views
How to protect your anti virus program or logging agent?
its a very simple question but might not be too trivial. Imagine an attacker has access to your device and gained SYSTEM privilege. Your company has installed a logging agent on your device to capture ...
0
votes
2answers
370 views
How to hide device files on linux?
I want to hide /dev files on Linux because some files can be dumped and used for reverse engineering/attack purposes.
My primary goal is to avoid users able to see those files from a shell: lurking ...
7
votes
2answers
4k views
Where to find the security hardened docker images
Is there any service that provides certified, security hardened Docker images for common platforms like Python, PHP, Node, Java, etc. with 0 major/critical CVEs.
Currently, we are using the ones from ...
0
votes
1answer
74 views
How to restrict plugins/tools like Netcraft and Builtwith to detect server side technologies?
My organization wants to restrict all the plugins/tools like Netcraft and Builtwith to detect all the server side technologies for security reason like platform, operating system name and version, web ...
0
votes
2answers
206 views
Best Source of Security Configuration Guidance
Over the years I have used a number of different sources of security configuration guidance for a spectrum of systems including for example:
https://www.cisecurity.org/cis-benchmarks/
https://www....
1
vote
0answers
268 views
Hardening evaluation of shared objects files
In order to evaluate if security mechanisms are applied on binary files during compilation I usually use the checksec tool.
My question is: if I want to check an .so file, which checksec's fields ...
1
vote
2answers
176 views
How to mitigate the risks of using new, third party imported electronic accessories?
As someone who is naturally good at recognizing risk and who are striving to maintain a wholistic view on security, I’m wondering how to evaluate and reduce the risks of hardware accessories (I.e. ...
13
votes
2answers
981 views
Securing a Laptop from a Foreign Intelligence Agency
What would be the best practices for securing a single-purpose Windows laptop against a determined foreign intelligence agency from tampering with data on the machine? The machine would be used ...
2
votes
1answer
357 views
the state of ASLR, PIE, SSP on Debian in 2018?
As far as I remember,
most Debian Wheezy packages were not compiled with those useful security flags (ASLR, PIE, SSP, and more).
Did the situation improve with Debian Squeeze or the upcoming Debian ...
