When migrating from one server to another, it is often desirable to migrate the iptables firewall rules as part of the process. This tutorial will show you how to easily copy your active iptables rule set from one server to another. This tutorial…
On September 24, 2014, a GNU Bash vulnerability, referred to as Shellshock or the “Bash Bug”, was disclosed. In short, the vulnerability allows remote attackers to execute arbitrary code given certain conditions, by passing strings of code following environment variable…
OpenLDAP provides an LDAP directory service that is flexible and well-supported. However, out-of-the-box, the server itself communicates over an unencrypted web connection. In this guide, we will demonstrate how to encrypt connections to OpenLDAP by configuring an LDAP…
OAuth 2 представляет собой фреймворк для авторизации, позволяющий приложениям осуществлять ограниченный доступ к пользовательским аккаунтам на HTTP сервисах, например, на Facebook, GitHub и the cloud provider. Он работает по принципу делегирования аутентификации пользователя сервису, на…
Learn how to configure custom domains, SSL certificates, and CDNs on an app platform to enhance your app’s performance and security.
Learn OAuth 2 fundamentals, how authorization works, and how to securely grant API access. Covers roles, grant types, and when to use each flow.
This article will walk you through the installation of wpscan and serve as a guide on how to use wpscan to locate any known vulnerable plugins and themes that may make your site vulnerable to attack. Using wpscan, we can see an outline of the site in a way similar to that of a would-be attacker.
Ao configurar a infraestrutura, colocar suas aplicações para funcionar será por muitas vezes a sua primeira preocupação. Contudo, colocar suas aplicações para funcionar corretamente sem atender às necessidades de segurança de sua infraestrutura pode ter consequências…
Learn how to build a Security Compliance Chatbot using Gradient to automate policy checks, ensure regulatory compliance, and streamline audits.
If you are planning to run a CoreOS cluster in a network environment outside of your control, you may be concerned that etcd communicates over plain HTTP. This guide describes enabling TLS/SSL security and a basic firewall on CoreOS machines.
