WordPress on Nginx, Part 2: vhost, MySQL & APC Configurations
Last time around we made our Debian VPS ready with the LEMP recipe. Let’s now configure the stack and migrate over the old WP website. What good a website with a “Welcome to…
Cyber Attacks Explained: DoS and DDoS
With this article, we begin a new series on the major kinds of cyber attacks that weaken the IT security infrastructure within organisations. With the rapid spread of Internet technologies and applications, the…
SYN Flooding using SCAPY and Prevention using iptables
DoS (Denial of Service) attacks against Web services make them unavailable for legitimate users, affecting the website owner’s potential business. These involve intentional consumption of network, CPU and memory resources. In this article,…
Securing Apache, Part 11: Logs, et al.
In this final part of the series, we will discover how to strengthen security in Apache by logging and other miscellaneous ways. Configuring a system to be secure is indeed a key task,…
Creating Your Own Server: The Socket API, Part 2
Earlier, we created a simple server and client program using the socket API. This time, we’ll first start with a program, and then explain what’s going on. So start up your systems, and…
Storage Management using Openfiler, Part 2
The first part of this series gave readers step-by-step instructions to build Openfiler from scratch. This second part covers two additional important features of Openfiler: bonded interfaces and software RAID. We also have…
Advanced Nmap: NMap Script Scanning
In previous articles, we have studied NMap in great detail, including live scanning a firewall and verifying the recommendations. Now, it’s time to study NMap script scanning. Nmap.org describes the Scripting Engine (NSE)…
Advanced Nmap: Scanning Firewalls Continued
The previous article detailed methods to scan an IPCop-based firewall in a test environment. The scan output revealed several open ports, which could lead to various vulnerabilities. Based on the scan results, several…
Metasploit 101 with Meterpreter Payload
The Metasploit framework is well known in the realm of exploit development. It is a standalone tool for security researchers, penetration testers and IDS/IPS developers. As of now, it has 640 exploit definitions…
Securing Apache, Part 3: Cross-Site Request Forgery Attacks (XSRF)
Intended for information security experts, systems administrators, and all those concerned about Web security, this third article in the series moves on from SQL injection and XSS to how to secure Web applications…
May 22, 2013
amitsaha — Thank you for your kind comments everyone. I am glad it's been of help.
I am excited to announce my book:...
May 22, 2013
zero client — SUNDE desktop computing solutions are very much cost effective with environmental
concern. With SUNDE, your work place can turn out to...
May 22, 2013
tabsong — pretty nice
May 21, 2013
JKR — More efficient? Probably. More readable? Definitely not.
May 21, 2013
Prashanth Joshi — The author assumes that the first article being introductory in nature is for the beginners. So there is no question...
