Security researchers identified a new OpenSSL vulnerability, called DROWN( Decrypting RSA with Obsolete and Weakened Encryption ) on March 2016. This attack was focused on servers that use the more secure TLS protocol, which also supports the obsolete SSLv2.This vulnerability allows an attacker to decrypt the highly secured TLS encrypted communication if the server houses SSLv2 cipher support. DROWN was assigned the CVE-2016-0800 id by the us-nert on the march (https://www.us-cert.gov/ncas/bulletins/SB16-067 ). More than 11 million websites that use TLS were vulnerable to DROWN attack. If your website is protected by TLS and your server directly on indirectly supports the older SSLv2, you are also vulnerable and an attacker may exploit it to get important information such as user names, …
Kibana is an open-source analytics and visualization platform designed to work with Elasticsearch. It enables users to search, analyze, monitor, and visualize log and time-series data through interactive dashboards, charts, and graphs. Kibana acts as the visualization layer of the ELK Stack (Elasticsearch, Logstash, Kibana), allowing teams to transform raw machine data into meaningful insights. What is Kibana? Kibana is a web-based interface used for: It communicates directly with data stored in Elasticsearch indices and presents information visually using charts, maps, graphs, and dashboards. Kibana can be deployed: Prerequisites Before installing Kibana, ensure the following: Example cluster setup: 192.168.0.XX node1192.168.0.YY node2192.168.0.ZZ node3 All servers should communicate using both hostname and IP address. Installing Java Install OpenJDK: Verify installation: Installing Elasticsearch …
DDoS has emerged as a choice of weapon for hackers. DDoS attackers not only use it to target individual websites and servers of the network, but also subdue the network itself. The growing dependency and usage of the Internet, makes the impact of successful DDoS attacks more challenging for service providers and other enterprises, costing them thousands of money lost in revenue and productivity. DDoS attackers employ much sophisticated spoofing techniques and protocols day by day and it has become essential to develop a solution that has been designed to specifically detect and destroy DDoS attacks to help the businesses and enterprises run efficiently. DDoS attacks overwhelmed servers, network links and network devices by disrupting Internet systems. The attackers utilize …
The Zend OpCache provides faster PHP execution through opcode caching and optimization. It improves PHP performance by storing precompiled script bytecode in the shared memory. Installing Zend OPCache on PHP 5.3 or 5.4 1. Login to SSH on your server 2. Type the following commands: #cd /usr/local/src #wget http://pecl.php.net/get/ZendOpcache # to get the latest (master) build do the following instead:
Icinga is a fork of Nagios monitoring system. There are lots of changes and upgrades compared to Nagios, especially in version 2. The main visible difference is UI which is built on ext js. Other significant differences are in hosts and services definitions. Icinga2 designed to monitor large complex environments. Pre-requisites We need to make sure to install a LAMP stack and epel repository on the CentOS7 server for other dependency application which will support icinga2 . Icinga2 will collect the service information based on the monitoring plugins, so we need to install nagios plugins. Also, we should install IDO modules for MySQL which will use for Icinga2 Web interface and other web interfaces. Then set up MySQL database (create …
The Manage External Authentications interface in WHM allows you to manage the OpenID Connect-compliant identity providers that your server’s users can use to log in to cPanel, WHM, or Webmail. Today let see the common external authentication techniques available with cPanel and how to enable/disable these features : 1] External Authentication Via cPanelID -> Steps for enabling and disabling WHM authentication via cPanelID as follows. Configuring The External Authentication Via cPanelID -> Log into WHM as root -> Navigate to Security Center >> Manage External Authentications
Nowadays, brute force attacks on servers/websites are frequent. A brute force attack is generally a password-guessing technique. It is a type of attack that tries every possible combination of characters or data in order to find the decrypted message. Brute force guarantees finding the key – it tries every possible combination and does not rely on any potentially incomplete dictionaries or lists of possible keys. cPHulk Brute Force Protection is an inbuilt protection used in WHM to prevent brute force attacks. cPHulk Brute Force Protection will detect and block continuous failed login attempts from IP addresses. cPHulk is a brute force protection system developed by the cPanel team and is exclusive to cPanel / WHM control panels. It has been integrated …
Pyxsoft antimalware Plugin for cPanel/WHM protects your server from attacker scripts such as c99shell, r57shell, ANIShell, and hundreds more. It is a real-time Anti Malware for cPanel/WHM. Attackers can take control of your servers or can damage your customer’s data by uploading one of these scripts. Pyxsoft antimalware plugin works to protects your server in two ways: Protecting from the six server’s entrance SQL Injection Legitimate Access (SSH, cPanel etc) Web Forms FTP Brute Force Attacks Installed Trojans or shells (more…)
As businesses grow, managing customer support manually becomes increasingly difficult. Emails get lost, customer issues remain unresolved, and support teams struggle to maintain response consistency. A helpdesk support system solves these challenges by centralizing communication and organizing support workflows. This case study explores how a company would approach a Helpdesk Support Implementation when onboarding a new client looking to modernize their customer service operations. Understanding the Client’s Needs The first step in any helpdesk implementation begins with understanding the client’s existing support process. Typically, organizations rely on multiple channels such as email, phone calls, social media messages, or spreadsheets to track issues. During the discovery phase, the implementation team analyzes: This assessment helps identify gaps and define clear goals for …
As we are aware, usually installing SSL Certificate requires Dedicated IP . The cost of this address is typically being passed down to the end user. Also the IPv4 address will be filled completely if every domain require a dedicated IP. So administrators decided to use multiple SSL installation on a single IP. Thus SNI (Server Name Identification) is established. >> What is SNI : —————— Server Name Indication (SNI) is an extension to the TLS protocol that indicates what hostname the client is attempting to connect. SNI is an extension of the TLS protocol, which allows browsers and servers to map multiple SSL-secured domain names to one IP address and gate, without this making any difference to the site …