Hack The Sec-Leading Resource Of Linux Tutorial

How to Install MariaDB 10 on CentOS 7 / RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #990000; font-size: large;">Installing MariaDB 10 on CentOS 7 / RHEL 7</span><br />
<span style="color: #990000; font-size: large;"><br /></span>
<br />
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
Installing MariaDB became very easy on the latest CentOS /RHEL Linux version 7. During initial setup MariaDB has a tick in the graphical setup environment which enables MariaDB and replaces MySQL.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwMo7BsU9vXIg51zHiq2lMsv2y7hRKUvaoj7vkZSOz8WWkOumvYMDMA7fZ5G7JT5EMKGHuXZiahQ3Y1KaeePAz68lb_7x-Fchyphenhyphen_GulaqeLuyepipFNiGPIFPPEy1WAazZkeHY4_Nmag9k/s1600/MariaDB_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwMo7BsU9vXIg51zHiq2lMsv2y7hRKUvaoj7vkZSOz8WWkOumvYMDMA7fZ5G7JT5EMKGHuXZiahQ3Y1KaeePAz68lb_7x-Fchyphenhyphen_GulaqeLuyepipFNiGPIFPPEy1WAazZkeHY4_Nmag9k/s1600/MariaDB_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
<br /></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
During installation the section</div>
<div style="background-color: white; color: #333333; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
<img alt="" src="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos3.png" style="border: 0px; height: 21px; margin: 10px; max-width: 100%; vertical-align: middle; width: 203px;" /></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
allows enabling a MariaDB server.</div>
<div style="background-color: white; color: #333333; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 1.1em; line-height: 1.5em; margin-bottom: 10px;">
<img alt="" src="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos2.png" style="border: 0px; height: 56px; margin: 10px; max-width: 100%; vertical-align: middle; width: 300px;" /></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<br class="Apple-interchange-newline" />
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">If you prefer the command line the installation can be performed with:</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># yum install mariadb-server</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">MariaDB is shipped untuned and not protected with MariaDB version 5.5.35. </span></span><br />
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">No basic optimizations in the configuration file have been set and the root user has no password. </span></span><br />
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">An update will install the version 5.5.37. (The latest version of MariaDB October 2014 is Version 5.5.39).</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">yum update</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">It is important to secure the server. MariaDB is shipped with a script to harden the system accordingly using a user dialog. </span></span><br />
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">It is highly recommended to use this script before creating and populating the databases.</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">mysql_secure_installation</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Install the latest Version 10 is an easy step since MariaDB's repository configuration wizard <a href="https://downloads.mariadb.org/mariadb/repositories" style="text-decoration: none;"><span style="color: red;">https://downloads.mariadb.org/mariadb/repositories</span></a> has now the latest CentOS/RHEL version available.</span></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Before installing 10.0 it is important to perform a backup and remove the existing 5.5 version</span></div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">if you have.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">yum remove mariadb-server mariadb-libs</span></span></pre>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-size: large; line-height: 23.0999984741211px;">Create the repository settings using the link and follow the steps <a href="https://downloads.mariadb.org/mariadb/repositories"><span style="color: red;">MariaDB</span></a></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="480" src="https://mariadb.com/sites/default/files/elfinder/94/Blog/centos.png" width="640" /></a></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<br /></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "helvetica neue" , "helvetica" , "arial" , sans-serif; font-size: large; line-height: 18px;">Here is your custom MariaDB YUM repository entry for CentOS. Copy and paste it into a file</span></div>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
<span style="font-family: "helvetica neue" , "helvetica" , "arial" , sans-serif; font-size: large; line-height: 18px;">under /etc/yum.repos.d/ (we suggest naming the file MariaDB.repo or something similar).</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># MariaDB 10.0 CentOS repository list - created 2016-01-25 08:01 UTC
# http://mariadb.org/mariadb/repositories/
[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.0/centos7-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1</span></span></pre>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 18px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">After the file is in place, install MariaDB with:</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">sudo yum install MariaDB-server MariaDB-client</span></span></pre>
<div style="background-color: white; font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; line-height: 1.5em; margin-bottom: 10px;">
</div>
<div style="background-color: white; line-height: 1.5em; margin-bottom: 10px;">
<span style="line-height: 23.0999984741211px;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">You are now running the latest 10.0 version!</span></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 12px; line-height: 15.6000003814697px;"># </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">/etc/init.d/mysql start
# </span></span><span style="background-color: transparent; font-size: 12px; line-height: 15.6000003814697px;"><span style="color: white;">mysql_upgrade</span></span></pre>
<ul style="text-align: left;">
<li><span style="font-size: large; line-height: 1.5em;"><a href="http://www.hackthesec.co.in/2016/01/install-mariadb-on-centos-6.html"><span style="color: red;">Install MariaDB On Centos 6</span></a></span></li>
</ul>
</div>

How to Install MariaDB 10 on CentOS 7 / RHEL 7

Installing MariaDB 10 on CentOS 7 / RHEL 7 Installing MariaDB became very easy on the latest CentOS /RHEL Linux version 7. During initi...

How to Install MariaDB On CentOS 6

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #660000; font-family: "arial" , "helvetica" , sans-serif; font-size: x-large;">Install MariaDB On CentOS 6</span><br />
<div>
<span style="color: #660000; font-family: "arial" , "helvetica" , sans-serif; font-size: x-large;"><br /></span>
<br />
<div>
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="background-color: white; box-sizing: border-box; font-size: 16px; font-weight: 700; line-height: 28.7999992370605px; text-align: justify;">MariaDB</span><span style="background-color: white; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"> is a community-developed fork of the MySQL relational database management system, the impetus being the community maintenance of its free status under the GNU GPL. Being a fork of a leading open source software system, it is notable for being led by its original developers and triggered by concerns over direction by an acquiring commercial company Oracle</span></span></div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZvWjf2im0TY93a7A8KGA0V-SkPtD5YpfMjN2QXn2duiNXM4FQcYUiC4aeU_M0Chfly9qjEV6C133P1tGPxAyj2jp1qQTrrlQLRf43ECkwqmf6vbNOaRMCLYj1C8OBlHNkEzlopemSjS8/s1600/MariaDB_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZvWjf2im0TY93a7A8KGA0V-SkPtD5YpfMjN2QXn2duiNXM4FQcYUiC4aeU_M0Chfly9qjEV6C133P1tGPxAyj2jp1qQTrrlQLRf43ECkwqmf6vbNOaRMCLYj1C8OBlHNkEzlopemSjS8/s1600/MariaDB_www.hackthesec.co.in.png" /></a></div>
<div>
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="background-color: white; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"><br /></span></span></div>
<div>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step1: <span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;">Add repository on Centos 6 32-bit</span></h4>
</div>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># vi /etc/yum.repos.d/MariaDB.repo</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-size: 16px; font-weight: normal; line-height: 28.7999992370605px; text-align: justify;"><span style="font-family: "arial" , "helvetica" , sans-serif;"> and paste following line:</span></span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">[mariadb]
 name = MariaDB
 baseurl = http://yum.mariadb.org/5.5/centos6-x86
 gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
 gpgcheck=1</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
 <span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;">Add repository on Centos 6 64-bit</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">[mariadb]    
name = MariaDB
baseurl = http://yum.mariadb.org/5.5/centos6-amd64    
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB   
gpgcheck=1</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="box-sizing: border-box; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"><span style="color: #0379bf; font-family: "roboto slab"; font-size: 20px; font-weight: bolder; line-height: 30px; text-align: left;">Step2:</span><span style="color: #0b5394; font-family: "arial" , "helvetica" , sans-serif;"> Start Install</span></span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># yum install MariaDB-server MariaDB-client -y</span></span></pre>
<div>
</div>
</div>
<div>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-stretch: normal; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; text-align: justify; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0379bf; font-family: "roboto slab";"><span style="font-size: 20px; font-weight: bolder; line-height: 30px;"> </span></span><span style="color: #0379bf; font-family: "roboto slab"; font-size: 20px; font-weight: bolder; line-height: 30px; text-align: left;">Step3: </span><span style="background-color: transparent; color: #0379bf; font-family: "arial" , "helvetica" , sans-serif; line-height: 28.7999992370605px;">After complete installation process, start MariaDB :</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># service mysql start</span></span></pre>
<div>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
 <span style="font-weight: bolder;">Step4: </span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; font-weight: bolder; line-height: 28.7999992370605px; text-align: justify;">Set MariaDB to start on boot:</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># chkconfig mysql on</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-weight: bolder;">Step5: </span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;">Secure MariaDB after installation to :</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">– Set (Change) root password
– Remove anonymous users
– Disallow root login remotely
– Remove test database and access to it
– Reload privilege tables</span></span></pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">[root@Unixmen-centos65 Downloads]# mysql_secure_installation</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-stretch: normal; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-weight: bolder;">Step6: </span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; line-height: 28.7999992370605px; text-align: justify;"> Check the new root password and databases:</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;"># mysql -u root -p</span></span></pre>
<div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-stretch: normal; font-weight: bolder; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; text-align: left; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-size: 20px; font-weight: bolder; line-height: 30px; text-align: justify;"><span style="font-family: "roboto slab";">Result Bellow</span></span><span style="font-family: "lato" , "arial" , sans-serif; font-size: 16px; font-weight: bolder; line-height: 28.7999992370605px; text-align: justify;">:</span></h4>
</div>
<div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="line-height: 15.6000003814697px;">Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 13
Server version: 5.5.34-MariaDB MariaDB Server
Copyright (c) 2000, 2013, Oracle, Monty Program Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]></span></span></pre>
</div>
</div>
</div>
<div>
<a href="https://mariadb.com/">Click Here</a> For More Information About MariaDB</div>
<div>
<ul style="text-align: left;">
<li><span style="font-size: large;"><span style="color: red;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-mariadb-10-on-centos-7.html">Installing MariaDB 10 on CentOS 7 / RHEL 7</a> </span></span></li>
</ul>
</div>
<div>
<span style="color: white;"><span style="line-height: 15.6000003814697px;"><br /></span></span></div>
<div>
</div>
</div>
</div>
<div>
</div>
</div>
</div>
<div>
</div>
</div>
</div>
</div>
</div>

How to Install MariaDB On CentOS 6

Install MariaDB On CentOS 6 MariaDB is a community-developed fork of the MySQL relational database management system, the impetus bei...

What is ModSecurity and How to Install with Apache on CentOS/RHEL

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #660000;">HWhat is ModSecurity and How to Install with Apache on CentOS/RHEL</span></h2>
<div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ModSecurity</span> is a Web Application Firewall that execute as a Module on your Web Server and provides protection against various attacks to our web applications. It monitors HTTP traffic and performs real time analysis. It’s a product developed by Breach Security and is available a free software under the GNU License. It is Available for <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apache</span>, <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Nginx</span> and <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">IIS</span>.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIoA499Ma1AO7UoQJ1jYy6gpUyDZ55sYYLDG8AzhzkuZOeX0umVxETvYnUT3dJ-TuG0Ut1TXMDs5Lr6kknG7Z0X3YWrMxb1DC5F6rdQpN0CP9hrafCs1JkYTz1N1yT2fG25_J1xZUzhXQ/s1600/ModSecurity-www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="166" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIoA499Ma1AO7UoQJ1jYy6gpUyDZ55sYYLDG8AzhzkuZOeX0umVxETvYnUT3dJ-TuG0Ut1TXMDs5Lr6kknG7Z0X3YWrMxb1DC5F6rdQpN0CP9hrafCs1JkYTz1N1yT2fG25_J1xZUzhXQ/s640/ModSecurity-www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">The Module has several features.</span></span></div>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Filtered Request:</span> The incoming HTTP Request or analyzed by the ModSecurity Module before passing it to the Web Service, these request are compared against a group of predefined rules to take the appropriate action.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Anti-Evasion Techniques:</span> Routes and Parameters are normalized before the analysis to prevent evasion techniques.</span></li>
<ul style="border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Eliminates multiple bars (//)</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Eliminates directories referenced by itself (./)</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">In Windows the \ and / are treated the same</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">URL Decoding</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Null Bytes replaced for spaces ()</span></li>
</ul>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">HTTP protocol Understanding:</span> by understanding the HTTP Protocol, ModSecurity can perform specific and granular filtering.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Post Payload Analysis:</span> intercepts and analyse content transmitted using POST.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Audit Log:</span> It is possible to leave logs for further analysis.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">HTTPS Filtering:</span> since it works as an embedded module, ModSecurity has access to data after it has been decrypted.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Byte Range Check:</span> it detects and block Shellcodes, limiting the range of bytes.</span></li>
<li style="border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Real Time Monitoring:</span> Besides logging all the HTTP Traffic, ModSecurity can monitor traffic in real time to detect attacks, meaning it works as an intrusion detection tool.</span></li>
</ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">From Version 2 ModSecurity</span> added several additional functionality that are:</span></div>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Five phases of processing: Request header, Request Body. Response headers. Response Body and Logging</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Rules Transformation options</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Transactional variables</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">Persistent Data ( Used of IP follow up, Application Sesions and users)</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">XML Support</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;">IP Blocking</span></li>
<li style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; margin: 0px 0px 0px 30px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: black; font-family: Arial, Helvetica, sans-serif;"><a href="https://www.modsecurity.org/" style="outline: none; text-decoration: none;" target="_blank">And More</a>,</span></li>
</ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">ModSecurity can be deployed and integrated in our current Web Servers infrastructure, meaning that we do not have to modify our internal Network, we don’t add any point of failure, we can benefit from load balancing and scalability and we would not have any issues with compress or encrypted Data.<br />ModSecurity is a valuable security tool and have proven to be effective. If we want to protect our web applications this is a tool the deserves your attention.</span></div>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">How to Install ModSecurity and Get it Running in Linux CentOS/RHEL with Apache</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">To install ModSecurity in a Linux Server running Centos or RHEL Derivative with the Apache web Service, we follow these steps as the root user.</span></div>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 1: Install the EPEL Repository</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Firstly add the EPEL rpm repository in your system using following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># rpm –ivh http://fedora.mirror.uber.com.au/epel/6/i386/epel-release-6-7.noarch.rpm
</pre>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 2: Install ModSecurity and Predefined Rules</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Let’s install mod_security apache modules with predefined rules of mod_security.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum install mod_security mod_security_crs
</pre>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 3: Activate the Module</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Edit ModSecurity configuration file <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/etc/httpd/conf.d/mod_security.conf</span> and look for the<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">SecRuleEngine</span> Directive on the File and configured with the Desired Value.</span></div>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">On </span>– Rules are activated<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Off </span>– Rules are Deactivated<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">DetectionOnly</span> – Only Intercepts and logs Transactions</span></ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Since we want to Intercept and Block Attacks we configure it with <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">On</span>.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> SecRuleEngine <orange style="color: orange;">on</orange>
</pre>
<h4 class="heading2" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; color: #0379bf; font-family: 'Roboto Slab'; font-size: 20px; font-weight: bolder; line-height: 30px; margin: 0px 0px 8px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Step 4: Restart Apache and Check</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Now we restart the apache web services</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># service httpd restart
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">To confirm that our web application firewall is working we should see something like this in our Apache error logs.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># tail /var/log/httpd/error_log
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity for Apache/2.7.3 (http://www.modsecurity.org/) configured.
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: APR compiled version=”1.3.9″; loaded version=”1.3.9″
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: PCRE compiled version=”7.8 “; loaded version=”7.8 2008-09-05″
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: LUA compiled version=”Lua 5.1″
[Sat Mar15 16 09:20:58 2014] [notice] ModSecurity: LIBXML compiled version=”2.7.6″
<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Important files to Remember</span></h2>
<ul style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;"><ul style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; list-style: disc; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Arial, Helvetica, sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Mod Security Config File</span> – /etc/httpd/conf.d/mod_security.conf<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Debug Log</span> – /var/log/httpd/modsec_debug.log<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Audit log</span> – /var/log/httpd/modsec_audit.log<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Rules</span> – /etc/httpd/modsecurity.d/activated_rules</span></ul>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">References:<br /><a href="https://www.modsecurity.org/" style="outline: none; text-decoration: none;" target="_blank">https://www.modsecurity.org/</a><br /><a href="https://www.modsecurity.org/projects/modsecurity/apache/index.html" style="outline: none; text-decoration: none;" target="_blank">https://www.modsecurity.org/projects/modsecurity/apache/index.html</a></span></div>
</div>
</div>

What is ModSecurity and How to Install with Apache on CentOS/RHEL

HWhat is ModSecurity and How to Install with Apache on CentOS/RHEL ModSecurity is a Web Application Firewall that execute as a Module ...

How to Generate md5 checksum for all Files in a Directory

How to Generate md5 checksum for all Files in a Directory

How to Generate md5 checksum for all Files in a Directory Generate md5 checksum: find . -exec md5sum “{}” \; > /tmp/wwwmd5.list ...

How To Install Symfony 3 Framework on Ubuntu, Debian & LinuxMint

[OK]                                          
 Your system is ready to run Symfony3 projects <span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 4 – Start Application in Development Mode</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Now start development with Symfony php framework and built great application’s. To view changes in browser you can start Symfony developer web server using following command. By default web server will start on port 8000.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">                                              
$ php bin/console server:run

[OK] Server running on http://127.0.0.1:8000
 // Quit the server with CONTROL-C.<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Now access http://localhost:8000 in web browser.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwMcFpeEm7SIhyXmmGc6sXbSEXqphc0oRh1jtFwUcCcSEVZAjQTpInxM1i1-GqdIic73tn0YK_C2TC92nN_EjzHKHsZQSB2tbqCLl0o3IKJNexLr2mF7bIS1c1F_1bDcWGUoKB0RknqTE/s1600/symfony3-install-on-linux-www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="376" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwMcFpeEm7SIhyXmmGc6sXbSEXqphc0oRh1jtFwUcCcSEVZAjQTpInxM1i1-GqdIic73tn0YK_C2TC92nN_EjzHKHsZQSB2tbqCLl0o3IKJNexLr2mF7bIS1c1F_1bDcWGUoKB0RknqTE/s640/symfony3-install-on-linux-www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="color: #0b5394; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px;">Step 5 – Create Apache VirtualHost</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Now If you need to configure Symfony with sub domain. Create a new Apache configuration file under directory <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/etc/apache2/sites-available/</span> and add Virtual Host for your Symfony 3 application.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">$ vim /etc/apache2/sites-available/symphony3.example.com.conf
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">directory and add below content.</span></div>
<pre class="pretty" style="background: none 0px 0px repeat scroll rgb(240, 240, 240); border-left-color: rgb(116, 183, 63); border-left-width: 3px; border-radius: 5px; border-style: none none none solid; line-height: 1.5em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 8px 20px 8px 18px; vertical-align: baseline;"><VirtualHost *:80>
    ServerName symphony3.example.com
    DocumentRoot /var/www/myproj/web

<Directory /var/www/myproj/web>
        AllowOverride All
        Order Allow,Deny
        Allow from All
        <IfModule mod_rewrite.c>
            Options -MultiViews
            RewriteEngine On
            RewriteCond %{REQUEST_FILENAME} !-f
            RewriteRule ^(.*)$ app.php [QSA,L]
        </IfModule>
    </Directory>

ErrorLog /var/log/apache2/myproj_error.log
    CustomLog /var/log/apache2/myproj_access.log combined
</VirtualHost><span style="font-size: 0.9em;">

</span></pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif;">Finally enable website and reload Apache service using below command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">$ sudo a2ensite symphony3.example.com
$ sudo service apache2 reload<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; color: #555555; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWF9prGd5AEp8MIkThVFXjgIEc__5InS0cOp1tItAQEsYP4JMdK-aEd_UwvGVp27zio3OR2sDUZ7SefxkjOO_3fPdXS9nL77kNXdTyzTQzwQN5LibUoBMLxkv7nQuMF02lkz_ccBlMzLQ/s1600/symfony3-setup-with-apache-www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="376" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWF9prGd5AEp8MIkThVFXjgIEc__5InS0cOp1tItAQEsYP4JMdK-aEd_UwvGVp27zio3OR2sDUZ7SefxkjOO_3fPdXS9nL77kNXdTyzTQzwQN5LibUoBMLxkv7nQuMF02lkz_ccBlMzLQ/s640/symfony3-setup-with-apache-www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Arial, Helvetica, sans-serif; font-size: large;">  Click</span><span style="font-family: Arial, Helvetica, sans-serif; font-size: large;"> </span><a href="https://symfony.com/what-is-symfony" style="font-family: Arial, Helvetica, sans-serif; font-size: x-large; outline: none; text-decoration: none;" target="_blank">here</a><span style="font-family: Arial, Helvetica, sans-serif; font-size: large;"> </span><span style="font-family: Arial, Helvetica, sans-serif; font-size: large;">to read more about Symfony framework.</span></div>
</div>
</div>

How To Install Symfony 3 Framework on Ubuntu, Debian & LinuxMint

How To Install Symfony 3 Framework on Ubuntu, Debian & LinuxMint Symfony is a web application framework written in PHP. Its provide...

TCP Reverse Shell with Password Prompt - 151 bytes

<div dir="ltr" style="text-align: left;" trbidi="on">
<b><span style="color: #0b5394; font-size: x-large;"> TCP Reverse Shell with Password Prompt - 151 bytes</span></b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgh_3tK4oQgBGtYrkVWdA50QKQC7AE_eJFSOrv4sfu54Dk95SHf6UX-cgfD4Dwm-aIw8bfQ9V4N13UJGWJf60xEdeSRfA6j7Q-gsTYw6RizK0KbdHZDJmrRY3XCnACAsX3VpLcQ6u5gOj5X/s1600/shell_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="135" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgh_3tK4oQgBGtYrkVWdA50QKQC7AE_eJFSOrv4sfu54Dk95SHf6UX-cgfD4Dwm-aIw8bfQ9V4N13UJGWJf60xEdeSRfA6j7Q-gsTYw6RizK0KbdHZDJmrRY3XCnACAsX3VpLcQ6u5gOj5X/s320/shell_www.hackthesec.co.in.png" width="320" /></a></div>
<b><span style="color: #0b5394; font-size: x-large;"><br /></span></b>
<br />
<table class="exploit_list" style="background-color: rgb(239, 239, 239) !important; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-family: 'Open Sans', sans-serif; font-size: 14px; line-height: 24px; margin-bottom: 10px; margin-top: 10px; padding: 1px !important; width: 607px;"><tbody style="box-sizing: border-box;">
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">EDB-ID:</strong> 39185</td><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td><td style="box-sizing: border-box; padding: 5px 10px;"></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><table class="exploit_list" style="background-color: rgb(239, 239, 239) !important; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-size: 14px; line-height: 24px; margin-bottom: 10px; margin-top: 10px; padding: 1px !important; width: 607px;"><tbody style="box-sizing: border-box;">
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Author:</strong> Sathish kumar</td></tr>
</tbody></table>
</td><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td><td style="box-sizing: border-box; padding: 5px 10px;"></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/39185" style="background-color: transparent; box-sizing: border-box; color: #337ab7; outline: 0px; text-decoration: none; transition-duration: 0.3s; transition-property: background-color, box-shadow, border, color, opacity;"><span class="fa fa-file-code-o" style="box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1;"></span> Source</a> </td><td colspan="2" style="box-sizing: border-box; padding: 5px 10px;"><br /></td></tr>
</tbody></table>
</div>

TCP Reverse Shell with Password Prompt - 151 bytes

TCP Reverse Shell with Password Prompt - 151 bytes EDB-ID: 39185 Author: Sathish kumar Download Exploit: Source

Best Security Tips for LAMP Stack (Apache, MySQL and PHP) on Linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: red;">Best Security Tips for LAMP Stack (Apache, MySQL and PHP) on Linux</span></h2>
<div>
<span style="background-color: white; font-size: 16px; line-height: 28px;"><span style="font-family: "arial" , "helvetica" , sans-serif;">Many of new system administrators forgot to apply security, when configuring web hosting environment for production use with Apache, MySQL and PHP. I am trying to include all those security tips which we must be considered while preparing a new system for production use or any existing LAMP setup.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIZhiLjnflSl4yeA02RL_fY2tb19f5CHDIw1dLKcr5t4v3ae1i9M2RGy7QFgLSu1yh1wzXjRprgRIbsffqIqNP1ppK5uDb0kQoeBTHfGqveFJxYf-QcItYXlViWhNzCRrv2IRwgOYS7hWY/s1600/lamp-stack-www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIZhiLjnflSl4yeA02RL_fY2tb19f5CHDIw1dLKcr5t4v3ae1i9M2RGy7QFgLSu1yh1wzXjRprgRIbsffqIqNP1ppK5uDb0kQoeBTHfGqveFJxYf-QcItYXlViWhNzCRrv2IRwgOYS7hWY/s1600/lamp-stack-www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="background-color: white; font-size: 16px; line-height: 28px;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><br /></span></span></div>
<div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">All the configuration changes are used in this article will be updated in following configuration files as per your operating systems. In some cases configuration files path may change. So make change in appropriate files. After making changes restart related services to change take effect.</span><br />
<span style="font-family: "arial" , "helvetica" , sans-serif;"></span><br />
<ul style="font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-linux-apache-mysql-and.html" style="text-decoration: none;"><span style="color: red;">Installing LAMP Stack on RHEL based systems</span></a></span></li>
<li><span style="font-size: medium;"><span style="color: red; text-decoration: none;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-lamp-apache-24-mysql-56.html" style="text-decoration: none;" target="_blank">Installing LAMP Stack on RHEL 7</a></span></span></li>
<li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-php-54-apache-22-and.html" style="text-decoration: none;" target="_blank"><span style="color: red;">Install Apache2, MySQL and PHP5 on Ubuntu and Debian System</span></a></span></li>
</ul>
</div>
<h4 style="background-color: white; border: 0px; font-size: 20px; line-height: 26px; margin: 0px 0px 15px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">For Ubuntu, Debian & LinuxMint:</span></h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apache2:</span> /etc/apache2/apache2.conf<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">PHP5:</span> /etc/php5/apache2/php.ini<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MySQL:</span> /etc/mysql/my.cnf</span></div>
<h4 style="background-color: white; border: 0px; font-size: 20px; line-height: 26px; margin: 0px 0px 15px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">For CentOS, RedHat & Fedora:</span></h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apache:</span> /etc/httpd/conf/httpd.conf<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">PHP:</span> /etc/php.ini<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MySQL:</span> /etc/my.cnf</span></div>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">1. Hiding Version and OS Identity (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">The <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ServerTokens</span> directive controls whether Server response header field which is sent back to clients. The ServerSignature configures the footer on server-generated documents. Edit Apache configuration file and update following directives as following.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> ServerTokens <orange style="color: orange;">Prod</orange>
</pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> ServerSignature <orange style="color: orange;">Off</orange>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">2. Disable Directory Listing (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">If directory listing is enabled in Apache. Then all the files and directories list will be shown on web page if no default document exists. Add following configuration in Apache to disable directory listing server wide.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Directory />
    Options <orange style="color: orange;">-Indexes </orange>
</Directory>
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After that you can enable listing per directory basis if required.</span></div>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">3. Restricting File and Directory Access (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Restricting access on basis of Directory, File and Location in Apache.</span></div>
<h4 class="heading3" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 17px; font-weight: bolder; line-height: 28px; margin: 0px 0px 4px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Restrict Directory</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To restrict directory and files access from users, It will only allowed the ips are defined with Allow from.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Directory "/home/user/public_html">
    Order <orange style="color: orange;">Deny,Allow</orange>
    Deny from <orange style="color: orange;">all</orange>
    Allow from <orange style="color: orange;">192.168.0.0/24</orange>
    Allow from <orange style="color: orange;">.hackthesec.co.in</orange>
</Directory>
</pre>
<h4 class="heading3" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 17px; font-weight: bolder; line-height: 28px; margin: 0px 0px 4px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Restrict File</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">We can also restrict specific file using File directive like below.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><File data.xml>
    Order <orange style="color: orange;">deny,allow</orange>
    Deny from <orange style="color: orange;">all</orange>
</File>
</pre>
<h4 class="heading3" style="background-color: white; border: 0px; font-size: 17px; font-weight: bolder; line-height: 28px; margin: 0px 0px 4px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Restrict Location</span></h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">The Location directive limits the scope of the enclosed directives by URL.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Location /admin>
    Order <orange style="color: orange;">Deny,Allow</orange>
    Deny from <orange style="color: orange;">all</orange>
    Allow from <orange style="color: orange;">192.168.0.0/24</orange>
    Allow from <orange style="color: orange;">.hackthesec.co.in</orange>
</Location>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">4. Disable Server Side Includes and CGI Execution (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">We can simply disable server-side includes and CGI execution by defining directory tag. Add below in Apache virtual host configuration file.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Directory "/home/user/public_html">
   Options <orange style="color: orange;">-Includes -ExecCGI</orange>
</Directory>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">5. Restrict PHP Information Leakage (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">By Default PHP installation exposes to the world that PHP is installed on the server, which includes the PHP version within the HTTP header (Eg:, X-Powered-By: PHP/5.4.20). Read More</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To hide this values from header edit php.ini and update below directive to Off</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">expose_php = <orange style="color: orange;">Off</orange>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">6. Disable Remote Code Execution (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">If allow_url_fopen is enabled on your setup, It allows ile functions like file_get_contents() and the include and require statements which can retrieve data from http or ftp remote locations and execute their code.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> allow_url_fopen=<orange style="color: orange;">Off</orange>
 allow_url_include=<orange style="color: orange;">Off</orange>
 
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">7. Disabling Dangerous PHP Functions (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">We can disable any php function using disable_functions directive in php configuration file. Disable all the functions which can be harmful and not used in applications.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">disable_functions =exec,shell_exec,passthru,system,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source,proc_open,pcntl_exec
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">8. Limit PHP Access To File System (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">The open_basedir directive set the directories from which PHP is allowed to access files</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> open_basedir="<orange style="color: orange;">/home/user/public_html</orange>"
 
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">9. Disable Unused PHP Modules (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">PHP supports “Dynamic Extensions” to load in php environment. We can disable any unused module to load in system by changing configuration file name.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># cd /etc/php.d/
# mv oci8.ini oci8.ini.disable

</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">10. Enable Limits in PHP (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To allow users to upload files of maximum size, update following configuration value.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> upload_max_filesize = <orange style="color: orange;">2M</orange>  <green style="color: green;"># Maximum 2M of file user can upload</green>
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Maximum execution time of each script</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> max_execution_time = <orange style="color: orange;">30</orange>  <green style="color: green;"># seconds</green>
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Maximum amount of time each script may spend parsing request data</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">max_input_time = <orange style="color: orange;">60</orange>  <green style="color: green;"># seconds</green>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'roboto slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">
11. Restrict Remote MySQL Access (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">If your application environment do not required to access database remotely, then disable all remote connections for database server. The easier way to do it force MySQL server to listen only on 127.0.0.1 (localhost).</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Edit MySQL configuration file and update following value.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> bind-address=<orange style="color: orange;">127.0.0.1</orange>
 
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">
12. Disable use of LOCAL INFILE (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Enabling LOCAL INFILE can be dangerous for you system security. If LOCAL INFILE is enabled on server, a user can load any file ( like /etc/passwd, /etc/shadow ) to a table easily.</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To disable this edit MySQL configuration file and add following value under [mysqld] section.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[mysqld]
local-infile=<orange style="color: orange;">0</orange>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">13. Create Application Specific User in MySQL (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Do not use mysql ‘root’ user for accessing database through application. It can be dangerous for your system. So make sure to create and use application specific user with limited access on application database only. To create mysql account use following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">root@hackthesec:~# <orange style="color: orange;">mysql -u root -p </orange>

mysql> CREATE USER '<orange style="color: orange;">myusr</orange>'@'<orange style="color: orange;">localhost</orange>' IDENTIFIED BY '<orange style="color: orange;">password</orange>';
mysql> GRANT SELECT,INSERT,UPDATE,DELETE ON <orange style="color: orange;">mydb</orange>.* TO '<orange style="color: orange;">myusr</orange>'@'<orange style="color: orange;">localhost</orange>' IDENTIFIED BY '<orange style="color: orange;">password</orange>';
mysql> FLUSH PRIVILEGES;
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">14. Improve Security with mysql_secure_installation (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After installing MySQL mysql_secure_installation command is very useful for securing MySQL server. This command will also enable password protection on root user.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">root@hackthesec:~# <orange style="color: orange;">mysql_secure_installation </orange>

"Only required output is showing below. In actual you will see more output on-screen"

Change the root password? [Y/n] <orange style="color: orange;">y</orange>
New password: **********
Re-enter new password: **********

Remove anonymous users? [Y/n] <orange style="color: orange;">y</orange>
Disallow root login remotely? [Y/n] <orange style="color: orange;">y</orange>
Remove test database and access to it? [Y/n] <orange style="color: orange;">y</orange>
Reload privilege tables now? [Y/n] <orange style="color: orange;">y</orange>