Home page logo

basics logo Security Basics mailing list archives

Re: Strange server behavior.
From: Christian Lauf <mailinglisten () brennt net>
Date: Tue, 28 Dec 2010 21:57:54 +0100

Hello Paul,

what I regularly do is initiating a Vulnerability Scan.
Either with tools like Metasploit/Nessus or, much easier/quicker, with the Free Network Vulnerability Scan from Qualys.
(URL: http://www.qualys.com/forms/trials/qualysguard_free_scan/)

You sign up for nothing and get a detailed report what have been found.
Well ok.. Not all gathered information are shown because it's a trial, but mostly it should be enough for getting a hint. For example: For one of my servers Qualys reports that the /etc/passwd could be printed out via a malformed request. But doesn't show the gathered data (only when you're subscribed.) But if I visit all URLs that Qualys checked on my server containing the word *passwd* I get normal website content and not the file itself.

You could also search if your website has been infected with malware.
(URL: http://www.qualys.com/forms/trials/stopmalware/)
Although it doesn't look to me like that's the case.

For private mail please use my GPG-Key.
ID: 0xB7849C76

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]