To check for the CVE-2014-6271 vulnerability env x='() { :;}; echo vulnerable’ bash -c “echo this is a test” it should NOT echo back the word vulnerable. To check for the CVE-2014-7169 vulnerability (warning: if yours fails it will make or overwrite a file called /tmp/echo that you can delete after, and need to delete … Read more
I have all of the scenarios setup in my environment. (openvpn site-site, road warriors; cisco ipsec site-site, remote users) By far the openvpn is faster. The openvpn software is less overhead on the remote users. The openvpn is/can be setup on port 80 with tcp so that it passes at places that have limited free … Read more
If you can’t modify anything on the server (site fully static) then there is no point in trying to break into it. In enterprise kind of setting you can achieve this by limiting login and restricting write permission to only people coming from the local network, but for most people this kind of setting is … Read more
The </head> tag is the giveaway; it should be in header.php.
wp-admin/admin-ajax.php is the script used by any plugin or theme using WP Ajax API and Ajax actions can be registered for non-logged in users. For example: //For logged in users add_action( ‘wp_ajax_my_action’, ‘my_action_callback’ ); //For non-logged in users add_action( ‘wp_ajax_nopriv_my_action’, ‘my_action_callback’ ); There is no problem on that. See WP Ajax documentation for more information.
The safest way to manage content from outside of the WordPress dashboard, and make use of the WordPress roles and capabilities model, is via XML-RPC. The basic methods built in to WordPress XML-RPC allow you to add, edit and delete posts and media, and restrict the ability to do so based on WordPress user permissions. … Read more
From your error log they are sending a HTTP/1.1 request without the Host: portion of the request. From what I read, Apache replies with a 400 (bad request) error to this request, before handing over to mod_security. So, it doesn’t look like your rules will be processed. (Apache dealing with it before requiring to hand … Read more
If you care about security you should not install themes and plugins from the wordpress admin. Either install them by uploading via FTP or use WP-CLI for that. There is just no way to change file owners when the script is running in the context of the web server, therefor the only way to maintain … Read more
You can use OpenSSL. If you have to check the certificate with STARTTLS, then just do openssl s_client -connect mail.example.com:25 -starttls smtp or for a standard secure smtp port: openssl s_client -connect mail.example.com:465
You should sanitize the request URI. I was able to bypass this by adding an additional slash to the URL. For example: wp-admin/widgets.php That request displays a blank page (as it should). wp-admin//widgets.php That request bypasses the restriction. It’s hard, bordering on impossible, to answer this question in the affirmative (ie “Yes, this works as … Read more