If you have any questions, contact us:
Telegram:maintex
ICQ:1607000

  #1 Old 05-21-2015, 01:20 PM
Newer
 
Newer's Avatar
 
Join Date: May 2015
Posts: 61
Newer is on a distinguished road
Default [How To] Website Security/Optimize Peformance [Important]

-------
Exploit #1 (WebDav)
-------

How do I know if this could apply to me?
Your website and/or website is hosted on your computer, vps, or dedicated server.
To host your server you're using any of the following web servers; XAMPP, WAMPP.
You have apache running on your computer, vps, or dedicated server.

How do I check if this applies to me?

Go to the start menu on your computer, find "Computer". Right click and press "Map Network Drive". For the folder location, enter "http://yourwebsiteorip.com/webdav/". If it connects, and shows a login screen, you're vulnerable to this.

Go to "http://yourwebsiteorip.com/webdav/" in your web browser. If a webdav test page pops up, you're vulnerable to this unless you already did the guide to fix it (suggested you do the top test to be sure).

How do I fix this?

Go into the XAMPP folder located in C:\XAMPP\. Go into apache > conf > extra > httpd-dav.conf (open that file).

Find the following line:

Code:
<Directory "C:/xampp/webdav">
Dav On

Order Allow,Deny
Allow from all
Replace it with the following line:

Code:
<Directory "C:/xampp/webdav">
Dav Off

Order Deny,Allow
Deny from all
Once you've saved the changes, restart your web server and you're set to go.
Newer is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


Cybercrime forum, cybercrime site, ,fraud forum, russian fraud forum, Credit cards, carder, infraud, carders.ws, crdpro, fraudsters, darkpro, crdcrew, dumps, cvv, cc, stuff carding, legit seller, vendor, free cvv, dumps+pin, skimmer, ,shimmer, emv software, emv chip writer, free cc+cvv, valid cards, track 2, free cvv, dump pin, dumps, cvv, cc, credit cards, real carding, legit vendor, carder forum, carding tutorial, russian hackers, online cvv shop, track 101, enroll, fullz