LokiSec.com

LokiSec.com
  • Security
    • Security Tools
    • Website Defense
    • Personal Security
    • Standards
  • Books
    • Technical

Website Defense

Archive

April 15, 2012 by CyberRad

Google Hacking

Google Dorks are advanced search parameters that you can use with Google’s search engine to narrow down a search.  Google Hacking is the art of using Google Dorks to find specific information on Google’s databases.  For example finding a known vulnerable version of a web application.  Read More »

Posted in Security Tools, Website Defense · Tagged default, dorks, file, google, hacking, page, password, Pentest, scan, security, tools, tutorial, username, web · Leave a Reply ·

Archive

December 17, 2011 by CyberRad

What to do after your *nix web server has been compromised

I thought it would be nice to write about what you should do when your *nix server is compromised.  The idea came from a conversation that was sparked on the Full Disclosure List. Read More »

Posted in Website Defense · Tagged apache, CentOS, iptables, Linux, log, netstat, php, Red Hat, security, Suse, tutorial, Ubuntu, Unix, web, website · Leave a Reply ·

Archive

October 26, 2011 by CyberRad

Using Rel1K’s Artillery To Protect Your Server

If you are looking for a way to secure your linux server from some of the most common attacks being carried out today against linux servers then look no further then Rel1K’s Artillery program. Artillery is a combination of a honeypot, file monitoring and integrity, alerting, and brute force prevention tool. Read More »

Posted in Website Defense · Tagged apache, Dave, Derbycon, free hugs, Linux, rel1K, scan, security, SET, tools, tutorial, web, website · Leave a Reply ·

Archive

September 26, 2011 by CyberRad

How to perform a SQL Injection Attack

SQL Injection (SQLi) is an attack vector that is extremely easy to carry out.  Most of the breaches you see today are perpetrated this way yielding huge payloads of data.  Understanding this attack will help you defend against this type of attack. Read More »

Posted in Security, Website Defense · Tagged asp, audit, coldfusion, Injection, php, SQL, SQL Injection, SQLi, tutorial, vulnerability, web, website · 2 Replies ·

Archive

June 30, 2011 by CyberRad

Deter unwanted scanners/crawlers using Weblabyrinth

Weblabyrinth is a dynamic maze of web pages written in PHP.  The main goal of Weblabyrinth is to delay and occupy malicious web scanners to give incident handlers time to investigate and respond to threats.  Weblabyrinth is designed to show a 404 error to legitimate web crawlers based on the crawlers user-agent.  Here is how you install and configure Weblabyrinth.  Read More »

Posted in Website Defense · Tagged aliases, apache, No, php, Snort, tutorial, user-agent, weblabyrinth · Leave a Reply ·

Recent Posts

  • Backtrack 5 r3 has been released!
  • Metasploit: The Penetration Tester’s Guide
  • Google Hacking
  • Backtrack 5 r2 has been released!
  • Going Phishing with the Social Engineering Toolkit

Twitter Feed

  • RT @smhack1: Reminder: The How Do I Linux? Class by Matt Titus is this weekend. Come join us on Saturday starting at 12PM. 2 days ago

  • RT @331EROCK: Chrono Trigger!!! :) http://t.co/QZtFpJocGJ 2 weeks ago

  • @mcgintyman @YourAnonLive @wusa9 Of course we are! What right does the NSA have to spy on Americans when their op parameters are foreign? 2 weeks ago

Archives

  • August 2012
  • June 2012
  • April 2012
  • March 2012
  • January 2012
  • December 2011
  • October 2011
  • September 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • March 2011

Tags

802.11 aircrack-ng aliases apache armitage audit Backtrack cree.py creepy flicker geolocation GUI hacker iis Linux metasploit meterpreter netcat network Nmap No Pentest php PTES Quality scan security SET Snort SQLi swiss army knife tools tutorial twitter Uber user-agent vulnerability w3af web weblabyrinth website WEP wireless WPA WPA2

Search

Spread the word!

Blogroll

  • Carnal0wnage
  • Darknet
  • DigiNinja
  • McGrew Security
  • mubix
  • PaulDotCom
  • SpyLogic
  • TaoSecurity

© 2011-2013 LokiSec.com All Rights Reserved