InfoSecGyan

You are at right place.

Friday, 24 October 2014

Upload & Share Files From Command-line

Hello All, Today I am going to talk about a Great implementation ever done for file sharing on web. Transfer.sh offers Command-line and web file sharing service which is much better than pastebin. Instead of following lazy steps like opening up a browser, loading "free file uploading" website, login in or signup, then browsing a desired file and uploading it,...

Thursday, 16 October 2014

POODLE Vulnerability saying Goodbye to SSL 3.0

      Secure Sockets Layer (SSL) encryption we’ve relied on from so long time, for secure communication on the Internet has a vulnerability. Google engineers (Bodo Möller, Thai Duong and Krzysztof Kotowicz) has discovered this particular vulnerability and points out that SSLv3.0 should not be used. Before SSLv3.0, SSLv2 was first widely used...

Saturday, 11 October 2014

Disable or Remove Directory Listing in Apache

If you create a new directory on your website and "index.html" file is not present in that particular directory, anyone access that directory e.g. from web browser, he/she can get a directory listing of all the files in that directory. For example, if you create a folder called "upload", you can see everything in that directory simply by typing "http://www.example.com/upload/"...

Wednesday, 8 October 2014

What is DLP and how do I protect my Organization’s data with it?

What is Data Loss/Leakage Prevention? DLP solutions help organizations protect the sensitive information that flows across and is stored on your networks. It allows data handling to be controlled using policies that describe attributes defining the data and the kinds of operations users can perform with the data. DLP solutions typically fall into two categories: “DLP light,”...

Monday, 6 October 2014

Disable or Remove Directory Browsing in IIS

Directory browsing is disabled by default in Microsoft's IIS server so that users cannot see the contents (files/folders) present in directories. For security purpose, you should keep the directory browsing disabled. If necessary, enable it only for particular directory that you wish to allow. Below are easy steps to disable directory browsing/listing in Microsoft's...