New answers tagged

1

This depends on the configuration of the server. If authentication is limited to specific methods like GET then it might be possible to get a listing without authentication using the PROPFIND method. If authentication is required for every method this will not be possible.


0

By adding VPN, you are also reaching a critical unusability threshold for marginal security improvement. Consider the decision as a time-cost vs security matter. If you have 1000 staff, and you are wasting 1 hour of time per week, that's 1000 hours per week. What if that time budget was spent on hardening the software implementation instead? You should ...


3

While the official remediation recommendation from Nessus (as you like know) is to explore patching, it is likely a generic piece of advice. I would agree that there is merit in the suggestion by symcbean that the web server (Apache in your case) is potentially not the root cause, rather the code that it is serving. There are some useful resources for ...


0

I am not aware of anything in Apache providing session management - session state is managed elsewhere, in PHP, PERL, python....of course, if I really tried I could leverage mod_usertrack or mod_session to create a very bad and insecure session implementation....but that would be rather dumb. The session has no value without application logic to read and ...


5

Let's suppose that the site allows uploads without protection and I am able to upload a PHP shell. I access the shell, which gives me terminal access. At this point, I am running commands on the operating system as www-data or whatever user the site is configured to run as. Now I can hunt around for configuration files that might have root passwords in it ...


Top 50 recent answers are included