Category: Network security

Apache HTTPD supports files with multiple suffixes, executing directives for each. This feature can lead to parsing vulnerabilities, bypassing upload whitelists.

This article discusses phpMyAdmin penetration testing, focusing on subnet scanning with a Python script to identify vulnerable instances for further exploitation.

Debug mode in frameworks like Laravel, ThinkPHP, and Django can expose sensitive info if not disabled after deployment, risking password or key leaks.

The Shellshock vulnerability in Bash (≤4.3) allows attackers to execute commands via environment variables, impacting Unix, Linux, and Mac systems widely.

The nginx configuration vulnerability arises from improper user settings, allowing files like `.png/.php` to be processed as PHP due to cgi.fix_pathinfo=1.

Jupyter Notebook is an interactive tool for Python, but without password protection, it risks unauthorized access, allowing arbitrary code execution.

**Summary:** Code-level analysis begins at Medium difficulty. Vulnerabilities include brute force, SQL injection, CSRF bypass, numeric injection, and XSS with tag case bypass….

A DVWA walkthrough post documents vulnerabilities like brute force, SQL injection, and XSS at Low difficulty, focusing on tools and practical practice.

Snort, an open-source NIDS, contrasts HIDS vs NIDS by analyzing network traffic with customizable rules, aiding threat detection and alert logging.

Learn Snort usage, write rules, and apply them based on logs. Snort captures, analyzes, and responds to network packets. View and edit Snort…