Reading : How I Hacked 40 Websites in 7 minutes
11:30 PM, Jan 9 2018, Paris
Link here
Somethings to take care while deploying web service
* Dont keep any ports open, unless its required and monitored. * Don’t allow any file upload to server (eg: If a PHP file is able to upload to server, then they can run Commandline scripts and everything… and can read all the code…. ) * Use Blob for image uploads. Not to server. * Any files allowed to upload to server have to be checked very carefully * Only install the most essential software in the production machine. ie. Don’t install FTP/SMB unless it is required. * Don’t run any software such as MySQL or apache as root, keep a user without any admin access. * Be careful to use passwords in the code…. Eg. Such as database passwords, which will give hacker access to the database. * Always keep the linux kernel uptodate , there are many vulnerabilities that is founded often, and published, and fixed by the linux community, anyone can refer to this documentation and attack if the version is old.





















