Archive for the 'vulnerability' Category

Reverse Proxy Bypass – Bug in Apache mod_proxy

Wednesday, October 5th, 2011

It is possible for an attacker to reach internal resources in a DMZ if RewriteRule or ProxyPassMatch directives are used in mod_proxy config

Posted in apache, bug, mod_proxy, rewrite, Security, vulnerability, vulns | Comments Off | permalink

Reverse Proxy Bypass – Bug in Apache mod_proxy

Wednesday, October 5th, 2011

It is possible for an attacker to reach internal resources in a DMZ if RewriteRule or ProxyPassMatch directives are used in mod_proxy config

Posted in apache, bug, mod_proxy, rewrite, Security, vulnerability, vulns | Comments Off | permalink

Penetration Testing Policy for Amazon EC2

Thursday, August 25th, 2011

read this if you need to conduct pen and security testing on / from EC2 instances

Posted in amazon, aws, cloud, ec2, infosec, policy, Security, vulnerability | Comments Off | permalink

Penetration Testing Policy for Amazon EC2

Thursday, August 25th, 2011

Posted in amazon, aws, cloud, ec2, infosec, policy, Security, vulnerability | Comments Off | permalink

An Illustrated Guide to the Kaminsky DNS Vulnerability

Monday, August 11th, 2008

exellent explanation for the much-hyped Dan Kaminsky DNS vuln. This is for people for whom word “DNS” sounds like it’s in elvish

Posted in network, reference, Security, sysadmin, vulnerability | Comments Off | permalink