-
IIS LockDown Tool released
Microsoft has finally released a tool that helpssecure your IIS machine. This new tool helps patch,and lockdown IIS from well known holes, as well as helping protect itself from unknown holes.Download it below(NOTE: This is also added to our patch section of this site.)IIS Lockdown Tool
-
Microsoft Releases New network Patching tool
I found the following link from a bugtraq posting anddecided to post it here. The tool below will patcha network of Windows machines with the latest securityupdates and patches. Below is a list of the platforms supported.Microsoft Windows versions 2000, 2000 SP1, 2000 SP2 Advanced Server Microsoft Windows versions 2000, 2000 SP1, 2000 SP2 Professional…
-
Htaccess Tutorial Part 3 released
Securityfocus has released its 3rd and final installment of "Hardening Htaccess". This section is written to help people to secure port 80 as much as possible and how to block/allow hosts into a particular area of your website. This will be added to the links section for future reference.Read more about it below.Htaccess Part 3
-
Code Red Part 3: Backdooring your IIS machine
Yet another variant of Code Red worm has comeout that not only exploits you but backdoorsyour webserver. It creates a file called root.exewhich is really a copy of your cmd.exe file. Thiswill allow a attacker to execute commands on your machine with complete control. This can also allowpeople to commit large scale ddos attacks with…
-
The Worm that won’t die
Well as everyone knows Code Red Worm is one busy worm.It seems to be so busy in fact that it managed to thissite over 40 times in less then 2 days. Originally we gothit roughly 30 times. Proof enough you need to keep your systems patched and up to date. This worm can be reddenedby…
Favorite Links
- Security Templates (New)
- The Web Application Security Consortium
- QA Security
- The Web Security Mailing List
- Romain Gaucher’s Blog
- Jeremiah Grossman’s Blog
Popular Pages
WASC Threat Classification
- Abuse of Functionality
- Application Misconfiguration
- Brute Force Attack
- Content Spoofing
- Credential/Session Prediction
- Denial of Service
- Directory Indexing
- Information Leakage
- Remote File Inclusion Attack
- Routing Detour Attack
- SOAP Array Abuse
- XML Attribute Blowup
- XML Injection
- XML External Entity Attack