How to secure remote access to admin/cms end? [closed] - security

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
What would be the best way to setup a secure remote access to ADMIN end/CMS of your web. app? - what available tools? configs? ideas? isolating admin end? there is talk of using SSL certs(how?)
Will be using browser on my PC to access Admin end to manage users..

I would run the admin console only on the server’s localhost and use SSH to forward localhost:1234 from the server’s point of view to localhost:5678 from my machine’s point of view with the following:
ssh -L 127.0.0.1:5678:127.0.0.1:1234 user#server
Then you can access the forwarded port via http://localhost:5678/.

Related

Catch hacker in action [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 9 years ago.
Improve this question
I have caught a hacker after looking through my site's FTP logs - it looks as if they have gleaned a list of passwords for several of my sites and are now connecting on a daily basis to upload spammy PHP files that perform header redirects to their sites. They always connect from the same IP address.
Blocking that IP and changing the FTP passwords is a given, but it seems so mundane and submissive. Is there anything I can do to this guy as he connects or once he's already in the system?
Some recommendations:
Change your FTP port. Most script kiddies use a port scanner to scan a list of IP addresses for TCP services. They mostly look for port 21.
Disable root login for SSH.
You mentioned this before, but make sure your password is secure and not written down on a post-it note on you computer monitor.

how to prevent tomcat from hacker? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
Today I recognized that my tomcat 6.0 has been deployed a strange webapp called jFoler 0.9.
After looking around, I realize that this webapp can upload, download, delete file on the server and computer system also. It also can do some cmd control, so I think it's very dangerous to my company if this happens again.
So how can I protect my server against the hacker?
1 install firewall
2 place tomcat box behind firewall
3 configure firewall to only allow access to port 80 on the tomcat machine to external devices and non admin internal devices.

Can we connect to database of localsystem in a remote network? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
i have access to a Linux system "A" with public I.P e.g(1.1.1.1). A oracle database system "B" with local I.P e.g(12.12.12.12) is present in the Local network of system"A". i can connect to the system "B" through Putty. I have a project in my system which needs to user the database of system "B". is there a way to tunnel the system "B" i.p to my system so that i can use it in my project? my system is windows.
You can use ssh/putty to create an SSH tunnel, this will allow you to connect to your localhost and have your packets tunneled to the host in your remote subnet.
You can find out how to do this here.

Connecting to Remote Desktop manually [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
Cloud Services aka Hosted Services
How do I connect to the remote desktop manually? Clicking the connect button will always run mstsc with maximum display size. I tried using the Url directly but keep getting a rejection. The .rdp file that is sent during connect is something like:
full address:s:mytestapp-20120825.cloudapp.net
username:s:xxxxx
LoadBalanceInfo:s:Cookie: mstshash=WCFServiceWebRole1#WCFServiceWebRole1_IN_0
Thanks.
I found it. I right-click the rdp file and select Edit.
I wonder what's in the rdp file that makes it work.

Sign script in Linux for SSH access [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I want grant user rights to copy a specific file from a remote server via SSH. And I do not want to give him any opportunity to execute something else on a remote server.
I have an access to a remote machine but I'm not an adimistrator, and I want to give another user possibility to copy specific file but nothing else.
Is there any way to sign a script in linux to avoid modification of this script or something similar that could help?
There is a solution to restrict SSH run only specific command:
http://chihungchan.blogspot.com/2008/08/restrict-ssh-to-run-specific-command.html

Resources