Security – Page 5 – Blog by Jay Mutkawoa (Nitin)

HTTPoxy – Is your nginx affected?

Post Author By Nitin J Mutkawoa
Post Date July 20, 2016
Post Comment 0 comments

httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments. It comes down to a simple namespace conflict: RFC 3875 (CGI) puts the HTTP Proxy header from a request into the environment variables as [Read More…]

Linux Application Security

DDOS attack on WordPress xmlrpc.php solved using Fail2Ban

Post Author By Nitin J Mutkawoa
Post Date July 20, 2016
Post Comment 0 comments

Several types of attack can be launched against WordPress website such as unwanted Bots, SSH Bot requests, unwanted Crawlers etc.. Some times back, i noticed that there were several attempts to perform a DDOS attack on a WordPress website by [Read More…]

Networking and Hardware Security

Tunnelix.com is now IPv6 ready! Are you?

Post Author By Nitin J Mutkawoa
Post Date July 17, 2016
Post Comment 0 comments

Validated by IPV6-test.com, Tunnelix.com is now IPV6 ready. Woohoo.. I now have the IPv6 validation button 🙂 Can you spot it? So, what is exactly IPV6-test.com? IPv6-test.com is a free service that checks your IPv6 and IPv4 connectivity and speed. Diagnose [Read More…]

Linux System Security

Operation Prison Break by cyberstorm.mu – Sandboxing and Firejail

Post Author By Nitin J Mutkawoa
Post Date June 25, 2016
Post Comment 0 comments

This is yet another successful hackathon carried out under the umbrella of cyberstorm.mu. Branded by the theme “Operation PB – Prison Break”, members of cyberstorm.mu shows skills of security innovations. We have also Rahul who is our proud newest member [Read More…]

Database Systems Security

Activating MariaDB Audit log

Post Author By Nitin J Mutkawoa
Post Date May 30, 2016
Post Comment 0 comments

“The purpose of the MariaDB Audit Plugin is to log the server’s activity. Records about who connected to the server, what queries ran and what tables were touched can be stored to the rotating log file or sent to the [Read More…]