Articles

Apache server hardening

Apache server hardening

JUN 18, 2025

Apache is a critical and fundamental step in the security of any web server that uses it.

Session fixation

Session fixation

JUN 18, 2025

Session fixation authentication loss" is critical because an attacker can force a known session ID on a user, allowing them to hijack the session once the legitimate user logs in, thus bypassing authentication.

Command Injection, LFI and RFI vulnerabilities in OWASP and possible countermeasures to mitigate them.

Command Injection, LFI and RFI vulnerabilities in OWASP and possible countermeasures to mitigate them.

JUN 19, 2025

The LFI/RFI vulnerability is dangerous because it allows an attacker to include and execute arbitrary files on the server. This can lead to the disclosure of sensitive information, remote code execution and, ultimately, full control of the server.