Hardening SSH: Fail2Ban, Nftables & Cloud Firewalls
Defense in depth for SSH with Fail2Ban, nftables, and the cloud provider Cloud Firewalls. Harden Ubuntu and block brute-force attacks via a bastion.
How To Secure React Applications Against XSS Attacks with HTTP-Only Cookies
In this tutorial, you will create a React application and mock API that implements a token-based authentication system set up in a local Docker container. You will exploit the token storage method with a cross-site scripting attack, then mitigate the issue with HTTP-only cookies. By the end of this tutorial, you’ll understand the security considerations needed to implement a functioning token-based authentication system alongside a React and Node web application.
How To Set Up SSL Certificates With PhpMyAdmin On An Ubuntu 12.04 VPS
PhpMyAdmin is a web-based front end used to configure MySQL databases in a graphical interface. While this software is very useful and can make managing databases easy, without SSL and the proper precautions, you could be exposing sensitive data to the internet. This guide shows you how to better secure your PhpMyAdmin installation.
Cómo configurar el acceso remoto para MongoDB en Ubuntu 20.04
Melissa Anderson escribió una versión anterior de este tutorial. MongoDB, también conocido como Mongo, es una base de datos de documentos de código abierto usada comúnmente en…
How To Set Up Multi-Factor Authentication for SSH on Ubuntu 20.04
This article will go over how to enable SSH authentication using an OATH-TOTP app in addition to an SSH key. Logging into your server via SSH will then require two factors across two channels, thereby making it more secure than a password or SSH key alone.
How To Secure MongoDB on Ubuntu 20.04
MongoDB doesn’t have authentication enabled by default, meaning that any user with access to the server where the database is installed can add and delete data without restriction. In order to secure this vulnerability, this tutorial will walk you through creating an administrative user and enabling authentication. You’ll then test to confirm that only this administrative user has access to the database.
How To Create a SSL Certificate on Apache for Ubuntu 14.04
The Apache web server is the most popular way to serve content on the web. If you need to communicate with your site visitors over a secured connection, setting up a TLS or SSL certificate will enable you to encrypt traffic. In this guide, we’ll discuss how to create a self-signed SSL certificate on Ubuntu 14.04 and use it with Apache to encrypt traffic.
How To Install and Secure phpMyAdmin on a CentOS 6.4 VPS
Database management is important for any site or application that must keep a large amount of information organized. This article will cover how to install phpMyAdmin, a web-based front end to MySQL and MariaDB database management systems, on a CentOS 6.4 VPS.
Configuración Inicial del Servidor en Ubuntu 16.04
Cuando se crea un nuevo servidor de Ubuntu 16.04, hay algunos pasos de configuración que se deben tener desde el principio como parte de la configuración básica. Esto aumentará la seguridad y la usabilidad de su servidor y le dará una base sólida para las acciones…
How To Set Up a Firewall with UFW on Ubuntu 16.04
UFW, or Uncomplicated Firewall, is an interface to iptables that is geared towards simplifying the process of configuring a firewall. While iptables is a solid and flexible tool, it can be difficult for beginners to learn how to use it to properly configure a firewall. If you’re looking to get started securing your network, and you’re not sure which tool to use, UFW may be the right choice for you. This tutorial will show you how to set up a firewall with UFW on Ubuntu 16.04.
