Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [server]

A server is a machine running a software daemon that is generally accessed over a network by other machines.

0
votes
0answers
36 views

Strange internet traffic on CentOS. Am I infected?

I have CentOS 7 VPS and when I entered lsof -i command I've seen some strange connection: sshd 26422 root 3r IPv4 1081208 0t0 TCP jabber.darkserver.in:ssh->89-64-44-49.dynamic....
2
votes
1answer
92 views

Why use .ENV? What's wrong with storing secrets in a config.php file outside root directory?

Seems to be the general practice these days is to store secrets (e.g., DB, API credentials) in a .ENV file then load it to $_ENV and $_SERVER automatically. This popular library does that and it's ...
0
votes
0answers
66 views

Is it possible to **really** secure server to server API using OAuth

(The Question is at the end of this tekst!) I am setting up a server to server API for data delivery to customers who then use this data in their software to produce some kind of computational ...
0
votes
1answer
30 views

How to Verify Integrity of Transferred Files in a Client Server Protocol

How do I implement integrity verification using the checksum of files in a client-server protocol where the client sends multiple files to the server. I am using the following steps: The client ...
0
votes
0answers
77 views

Get real IP Address behind VPN [duplicate]

Is there any way to get the real IP behind a VPN? If so what is the best way that is possible to do with least knowledge about the subject using it?
1
vote
0answers
34 views

Kerberos Protocol Centralized Server

If a small company is expanding with various branches across the country, how would the kerberos centralized server be configured? Are the new users assigned new ticket granting servers or are they ...
1
vote
1answer
26 views

Why do processes on servers have socket types associated to the port number? [closed]

Why do some servers have TCP/UDP alongside the port they're listening to. To my understanding TCP and UDP are socket layers, they're methods of determining how the traffic is being sent over the ...
0
votes
0answers
40 views

How to monitor a server for changes by an admin

I have been observing some unwanted activities & changes in my server by an Admin in our IT team. How do I get solid information on who has been accessing the server and what has been modified, ...
0
votes
1answer
64 views

For servers that are not internet facing, do they need to be authenticated to each other and should their communication be over HTTPS? [duplicate]

My gut instinct is that best practice would be to ensure that all internal servers communicate over HTTPS and that all servers are authenticated to each other. That would indeed be dream case ...
0
votes
0answers
13 views

Token-based server-to-server authentication of clients

As everyone knows, SE has had this feature where one login from one network, she/he logs in globally across all SE networks. This is done of course using local storage. I however want to login using ...
1
vote
1answer
55 views

Manage Logs of Excessive Member and Server Authentication Failures

Currently, in our SIEM environment, we are attempting to reduce noise and any non-actionable items. One of the most frequent items we receive on a weekly basis is a report based on excessive member ...
2
votes
4answers
112 views

Prove a client sent a request - voting system

Let's say I created a voting system where each voter would use an app and vote on a candidate. The app would send the vote to a server. The server would store the vote on a DB with the request IP. Is ...
0
votes
1answer
45 views

samba server exposed to wan

I recently realized that my samba server was exposed for about 3 years to the wan (ports opened and smbd was listening). I made a mistake when I configured my firewall and failed to check it. This ...
0
votes
0answers
22 views

How to prevent Oracle TNS protocol sending data in plaintext?

I am doing a security audit and discovered an Oracle Server pulling data from an ODS server in plaintext. I am able to sniff the traffic from one of the internal servers. Essentially, the Oracle ...
1
vote
1answer
94 views

How to protect data in case of an unauthorized physical access to a server

I have some VMs on a hypervisor. They run linux with full disk encryption. In case of an unauthorized physical access to a running server, I know that the attacker can extract passcode out of RAM via ...
-1
votes
2answers
78 views

Testing RCE and SSRF using Python SimpleHTTPServer [closed]

Is it possible to test RCE and SSRF vulnerabilities using Python SimpleHTTPServer? Or should I use a VPS server?
0
votes
3answers
387 views

Is SQL injection still a thing? [duplicate]

I was wondering whether SQL injection is still a thing or if it is mainly extinct due to the fact that I don't hear about corporations being hit by this vulnerability, And the last time I heard an ...
3
votes
2answers
49 views

When is an email rejected?

Currently, I am working on a web application and wanted to let users send emails to others through a web form. So, they just should submit their email address and my web app would then send mails to ...
1
vote
2answers
103 views

Is RIPv2 MD5 authentication insecure?

While performing a vulnerability assessment, I stumbled upon RIPv1 poisoning routing table attacks. The recommendation is to use RIPv2 with MD5 authentication. The idea is that the routes need to be ...
-1
votes
2answers
201 views

how to check if my server has been hacked [closed]

I have a couple of Ubuntu 16.04 servers. I want my server to be secure and ensure they can only be accessible by me and things. I check the auth.log and last. But I heard that hackers can change the ...
1
vote
3answers
244 views

How to detect a DoS attack if today all use network address translation?

If a basic DoS attack can be handled by limiting the number of connections that occur in a interval of time with one IP and some enterprises and institutions use network address translation with many ...
1
vote
2answers
262 views

Server Side request forgery (SSRF) explanation

I am looking to gain a better understanding of the SSRF vulnerability. I have googled and watched YouTube tutorials but they all show advanced techniques that are difficult to understand. I am ...
3
votes
0answers
129 views

Weird attack making my server CPU super high

I noticed that my server CPU is super high and the reason is grep "A" command After a deep look, that what I've found in my active internet connections list (netstat -tupn) tcp 0 0 ...
0
votes
1answer
180 views

over 100 scanner requests 5 min after domain registration

First off, I am no security expert! Yesterday I registered a .cf domain, I needed it for about 10 minutes. About 5 minutes after domain registration I got over 100 scanner requests (I checked all ...
1
vote
0answers
38 views

Secure Server start up [closed]

From the server implementations that I have seen, people normally use a properties file with all the passwords (that may be encrypted with hardcoded key(s)). I have therefore, created a server that ...
0
votes
0answers
50 views

event 4625 - log-in failures from an encrypted username

I am getting tons of these errors everyday for the past weeks, all having the same account name. I tried decoding the name using base64 but it seems that it uses another encryption. I really do not ...
0
votes
2answers
54 views

Internal Server to Server Authentication Using a Single Token

One of our security mandates require authentication between servers when transmitting data. These API endpoints are only accessible within the internal network and are never exposed. Our idea is to ...
3
votes
2answers
328 views

What is this SSH attack, am I hacked?

I see this in my Ubuntu server's log file: in my ssh my user is root but i see other user Disconnected like "teamspeak", what does that mean? auth.log Jul 3 21:39:01 vmi189193 CRON[25937]: ...
2
votes
2answers
92 views

How to verify server ownership by public IP (without associated domain)?

Company A has a set of servers with public IP address but not associated with any domain. The servers contain confidential information, so company A doesn't want to give access to 3rd party. Company ...
1
vote
0answers
662 views

can ping the server but not able to access [closed]

i am able to ping the server machine named "tallyserver" which is windows server 2003 machine configured with automatically IP address setting but when i am going to Network, sometimes it shows the ...
5
votes
3answers
1k views

How to protect our server from brute force attack? [closed]

One of the most common cyber attack is Bruteforce , what are the mechanisms available to protect this attack and how industry apply these mechanisms to mitigate the attacks (best practices)?
4
votes
1answer
881 views

OpenVAS won't generate SCAP Database

To deploy OpenVAS to Virtual machines I've been using Ansible for a while and it worked pretty well. Now today I wanted to deploy it to another machine but the openvas-check-setup script keeps telling ...
44
votes
3answers
6k views

How do hosting providers prevent the compromise of one website from causing the compromise of another one?

Could one create a vulnerable website on purpose to attack a server of a hosting provider? So in the question above which I recently asked we came to the conclusion that preventing one vulnerable ...
7
votes
2answers
493 views

Could one create a vulnerable website on purpose to attack a server of a hosting provider?

Is it possible for a vulnerability in one application to be exploited to attack another application on the same server? So according to the answer to the question above it is possible that when one ...
4
votes
2answers
292 views

Use mining to prevent DDOS attacks on websocket: Is this a viable solution?

I'm thinking whether the following way is a good way to completely and totally prevent ddos on my server. My idea is to use the same mechanism of cryptocurrency mining (bitcoin, with sha256 or any ...
0
votes
2answers
151 views

Security-wise, is an in-browser JavaScript implementation fundamentally different from a server-side language (e.g. Python) implementation?

As I understand it, JavaScript implementations running in browsers need to run untrusted code and operate on untrusted data in a secure manner. Language (e.g. Python) implementations running on a ...
-2
votes
1answer
156 views

Authentication process between the server and the browser [duplicate]

How the browser ensures that it is communicating to the right server?
-5
votes
1answer
111 views

what type of server is best for launching a vulnerable application on an Organization network? [closed]

For a demo purpose i need to install a vulnerable application and i tried using XAMP server but it opens up many ports and not safe to use it. so please recommend a server to launch a vulnerable demo ...
0
votes
1answer
142 views

TLS 1.3 server_handshake_traffic_secret calculation

I'm currently reading the Transport Layer Security (TLS) Protocol Version 1.3. In section 4.3.1 (Encrypted Extensions) it says In all handshakes, the server MUST send the EncryptedExtensions ...
0
votes
0answers
24 views

How to improve the authorization and client-server interaction scheme?

I'm creating a Qt-server which uses SSL via TCP. Clients can authorize themselves on the server using login and password and become users. Only users can perform any actions with their accounts. ...
4
votes
1answer
211 views

What can I do with physical access to a server?

I am taking a Sec Lab class and we've been sectioned into teams and tasked with 'attacking' the other teams while 'defending' against them. Each team is set up with 4 VMs, and we have a few days to ...
1
vote
2answers
85 views

What to review for server decommission?

I’ve read that the information security teams should be involved in the decommission process for servers (for example this answer or this sample process guide). They are supposed to review and ...
1
vote
0answers
66 views

What additional protection required for authentication and messages sending in addition to TLS? [closed]

I use TLS for securing my client-server TCP communications. I have a Qt server and Android and iOS clients. For TLS connection I use only server side certificates, so only clients sure that they are ...
5
votes
1answer
113 views

Is it acceptable for security engineers to have admin access to production servers?

In my organization, our server infrastructure team has historically held all admin access to production servers. We're recently trying to strengthen our security posture, so we have hired several new ...
1
vote
1answer
50 views

Opened port leads to a collection listing

I've been doing some searching on a macOS server and have noticed that there's an open port that I am able to access outside the network. When I go to this port it will ask for a username and a ...
1
vote
0answers
45 views

Are there any security risks associated with having static files on the server be publicly available?

I am going to frame this question using ASP.NET Core in mind since that is what I'm using, though my question is applicable to any scenario in which you have a client that makes requests to a server ...
0
votes
2answers
94 views

Can NIDS alone protect the Servers in our network, or we need HIDS application as well?

I have problem with some institute server. The scenario is like below. There is an institute (Government/Corporate/Industry) that have their own dedicated server. But there is no other security ...
1
vote
1answer
110 views

Is a strange test.cake file on my server a sign of a compromise?

On a clients shared hosting I found a file called test.cake in the admin folder. It's pretty big, 353 KBytes, and contains this: execve("/usr/local/bin/php", ["php", "login.php"], ["GREP_COLOR=1;32", ...
-3
votes
2answers
344 views

HTTPS Proxy Content Inspection [closed]

Is it possible for a proxy server to do content inspection on HTTPS traffic?
0
votes
1answer
286 views

Security concerns of RADIUS based server/workstation auth

So I'm using WPA2-EAP for a few years now with FreeRadius server. And it's pretty okay, I mean I don't really consider wifi access to be so super-duper critical break in success because it's pretty ...