Security – Page 5 – shell{&}co

Submit an openssl request file to a Microsoft PKI with certreq

This procedure will show you how to generate a certificate with this following requirements : a linux web server : a certificate request file is generated with openssl command a Microsoft Certificate Authority that will issue a certificate Follow these

Disable username enumeration on WordPress

I found a simple way to disable/prevent the username enumeration on a WordPress installation. Follow these steps edit the file .htaccess of your WordPress installation add the following lines : RewriteCond %{QUERY_STRING} author=\d RewriteRule ^ /? [L,R=301] You can check

Disable the SSL v3 Protocol on IIS and Apache

Disable the SSL v3 Protocol on IIS Open the Registry Editor and run it as administrator.For example, in Windows 2012: On the Start screen type regedit.exe. Right-click on regedit.exe and click Run as administrator. In the Registry Editor window, go

Automatic security update process with unattended-upgrades

If you use/administer a Debian/Ubuntu system, you can automate the security update process by using the program unattended-upgrades. This tool provides a simple way to manage this task. To install it : apt-get install unattended-upgrades dpkg-reconfigure unattended-upgrades After selecting “Yes”,

Encrypt a short message into spam

The author of SpamMimic describes a new way to encrypt and the most important and orginal the way to do it discreetly : There are terrific tools (like PGP and GPG) for encrypting your mail. If somebody along the way

PKI : Recover the certificate private key

PKI : Recover the certificate private key with Microsoft tools If a certificate does not contain the private key, the following part will be blank: Follow these steps to include the private key in the certificate file : Snap-In Configuration

PKI : x509 certificate verification process script

PKI : x509 certificate verification process script Description x509test is a software written in Python 3 that test the x509 certificate verification process of the target SSL/TLS client. The inspiration of this software comes from multiple reports on the insecurity

Password database : multi-user repository and AD auth

This project is a secure password repository to store and manage them based on an Apache web server, PHP and MySQL You can test from now the demo here The following users/passwords are defined : user1/pwd1 user2/pwd2 user3/pwd3 Features Active Directory

How to request and install a SSL certificate on Apache2

This post content will help you on how to request and install a SSL certificate on Apache2. As you can see (or not :)), Shell{&}co is now using SSL. The first reason of this change is in this article :

Online custom password generator

This is an online example on how to create a password generator. This password generator is written using Javascript. You can combine four parameters to create the password : upper case letter lower case letter number special character The minimum