Elephants will come back in this lesson.
We're going to talk about how to secure your apache web server.
In our previous lesson we learn how to install and configure the server.
Again now it's time to protocols so we're against the hacker attacks.
OK.
So let's get practical.
How good would this OK.
The first attack that I want to show you is knowing the sewer name and version name.
OK.
Hackers can use this technique you know more.
So where your web site is running OK.
What's the word and what the numbers are that Petchey.
OK so first of all let's see how this attack can be performed.
OK.
Let's take your IP address here and get like this.
OK.
This is our Web site our Web page.
So what hackers does is just search for a directory which does not present like this and it and so in
response or so the word display does so.
OK.
That is a bet you.
And the server that you want to so.
OK.
So by knowing this Apache was in word and our operating system hacker can easily know what abilities
are present for these so us Hagana and by getting that he can easily hack US system.
OK.
So pre-picked against this attack.
What do you need to do is just go to DC to get here and open this with sudo access Becci to dot com.
Sorry.
Why.
OK.
Can hear.
What do you need to do is you just need to hear these new lines of call.
There is so signature on and off.
OK.
None of that.
So Wilkens quickly adding these blue lines of call you can protect.
You are so against this attack.
OK.
Just write it down and they start upset.
So does that kick start.
Sorry.
So you're supposed to stop it now.
Let's try to perform the same thing again.
Let's do it easy.
OK.
Here you can see now we can get the words in number and the set of name here.
By adding these two lines of code.
You can protect against this attack.
The next techies are directory browsing.
So what is directory browsing.
OK.
First of all let's get inside that W.W..
Sorry.
OK.
Here w you then DML.
Here you can see in the Scottish D.M. file is present here.
It is our main file for the website and records here.
You create a new directory here with sudo access.
OK.
Sudo Cadia are an office.
OK.
Inside this Creative X-Fi go touch has stopped the XTi.
Inside s directory there is a file estopped the XTi.
Now open this file and have some data.
This is detest.
Understand the concept.
Not directly browsing Kogut.
OK now we added a Mubarak tree and inside the directory file is present.
So just trying to do here like this as an end.
OK so what happens is it reveals that directly contente update is a start the active file.
When you click this it will reveal this information.
OK so hackers can perform these kinds of attacks and they can get to know the intimate information or
they can get you or so school.
OK.
So to protect against these kinds of attacks what you need to do is you just go to the same file again
see the
Sudol.
Why go.
Why bet Betty got caught.
Again here you need to insert.
OK this call is directory.
OK that W.W. limit after this.
Options here.
Hyphen
in excess.
OK.
And make sure you pay as I'm typing.
OK.
Don't give any space or extra space there in case of this opportunity.
Next is big as it is and
like this are good enough to do this.
Now restored.
Betty
hogi Suro service is to start again now is to start now less time to perform the same thing here.
That's OK.
Now is not showing anything.
It says you don't how you shouldn't pay taxes on this.
So all we get in this way we can protect against this directly rousing attack.
The third thing that you need to do is you need to keep a bet.
You bet you vergin regularly.
OK so who approved you are Apache.
What you need to do is you just need sudo apt get install He Petchey to reinstall after performing this
operation.
It will reinstall or update the good and the battery was in OK.
The next pipe up attack is the didas attacks or by sending a huge amount of request to your server and
but that good or hacker can perform it didn't start back and you are so work goes down.
OK so protect against this attack.
What do you need to do is just file again here.
Why patch you through the court or get product against the DASAR tag.
I cannot show you here the demonstration for it because it takes a lot of time.
OK so to protecting against this I just state the directory that W W is DML and you can do this for
a particular directory.
Suppose I want to in meeting the request for the esoterically then I can type like this.
It is the main directory so that's why I am going to do this for it.
The worst part of it.
I want only 10000 request.
OK for our server
directory this way.
Just like the down restart
log.
OK the server is restarted here because we don't get any error here.
That means somewhere in our configuration is added successfully.
OK.