[prev in list] [next in list] [prev in thread] [next in thread] 

List:       security-basics
Subject:    Re: Strange server behavior.
From:       Christian Lauf <mailinglisten () brennt ! net>
Date:       2010-12-28 20:57:54
Message-ID: e5f2a885352e35981c5eed4d153b6109 () brennt ! net
[Download RAW message or body]

 Hello Paul,

 what I regularly do is initiating a Vulnerability Scan.
 Either with tools like Metasploit/Nessus or, much easier/quicker, with 
 the Free Network Vulnerability Scan from Qualys.
 (URL: http://www.qualys.com/forms/trials/qualysguard_free_scan/)

 You sign up for nothing and get a detailed report what have been found.
 Well ok.. Not all gathered information are shown because it's a trial, 
 but mostly it should be enough for getting a hint.
 For example: For one of my servers Qualys reports that the /etc/passwd 
 could be printed out via a malformed request. But doesn't show the 
 gathered data (only when you're subscribed.)
 But if I visit all URLs that Qualys checked on my server containing the 
 word *passwd* I get normal website content and not the file itself.

 You could also search if your website has been infected with malware.
 (URL: http://www.qualys.com/forms/trials/stopmalware/)
 Although it doesn't look to me like that's the case.

 Regards,
 Christian
-- 
 For private mail please use my GPG-Key.
 ID: 0xB7849C76

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL \
certificate.  We look at how SSL works, how it benefits your company and how your \
customers can tell if a site is secure. You will find out how to test, purchase, \
install and use a thawte Digital Certificate on your Apache web server. Throughout, \
best practices for set-up are highlighted to help you ensure efficient ongoing \
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


[prev in list] [next in list] [prev in thread] [next in thread]