hide-apache-web-server-version-information

11/02/202013/02/2020 admin

$ sudo vi /etc/apache2/apache2.conf #Debian/Ubuntu systems $ sudo vi /etc/httpd/conf/httpd.conf #RHEL/CentOS systems And add/modify/append the lines below: ServerTokens Prod ServerSignature Off Save the file, exit and restart your Apache web […]

Internet

Linux Command Line

17/09/201817/09/2018 admin

I created a cource on Udemy and i can give you a discount: 5 euro discount on my Linux Command Line Cource Learn Linux Command Line from Scratch. You will […]

Speed Chess

30/06/201822/07/2018 admin

In 1 dikke minuut, schaakmat. die zagen we niet aankomen.

WordPress user enumeration

21/06/201821/06/2018 admin

You can bruteforce WordPress users; wpscan –url prepperhacker.nl –enumerate u [+] We did not enumerate any usernames next step would have been: wpscan –url www.prepperhacker.nl –wordlist rockyou.txt –username admin It […]

WordPress XMLRPC.PHP

20/06/201820/06/2018 admin

Met het XML-RPC protocol is het o.a. mogelijk om op afstand de content van je website te beheren. Wanneer je dit niet gebruikt kun je het beter uitzetten omdat het […]

Internet

Harden your website

26/04/201826/04/2018 admin

internet.nl HTTPS: ./certbot-auto –apache -d prepperhacker.nl -d www.prepperhacker.nl MODULES: apachectl -t -D DUMP_MODULES: a2enmod headers a2dismod deflate HSTS: <IfModule mod_headers.c> Header set Strict-Transport-Security \”max-age=31536000; includeSubDomains; preload\” env=HTTPS </IfModule> DANE: https://joscor.com/blog/dane-tlsa-tutorial/ […]