All articles
Remediation guides for the findings in your Onlayer reports, and answers to common questions about the platform.
Reports & platform
3 articles- How Do I Report a False-Positive Finding?The scanning methods applied for your websites are in industrial standards and are specially designed to give you the least number of false…
- What Should Be Done After Improvement?After taking the improvement steps regarding the findings you have viewed through the report or interface, please inform them in response…
- Which Findings Should I Start With First?There is a prioritization mechanism for all the findings stated in the report or seen through the interface. The severity of the findings…
Web application
14 articles- Apache User Enumeration VulnerabilityWhen mod userdir is enabled on Apache servers, an attacker may brute for possible user names on the server. When this directive is enabled,…Low
- Cross-Origin Resource SharingThe latest browsers restrict running off-origin scripts within a site, this policy is known as Same-Origin Policy. Cross-Origin Resource…Medium
- Cross-Site Request Forgery (CSRF) DetectionUsing this vulnerability, an attacker may use an external site to push information to your website. If the login session is present on the…High
- Cross-Site Scripting (XSS)On the server-side scripting, if necessary actions to block client-side script injection are not taken care of, there is a potential risk…High
- Header Based XSSThe attacker uses HTTP headers to exploit client-side web applications. Expect and Referer HTML header directives are used to add an…High
- HTTP Apache Struts VulnerabilitiesMore than 800 Million consumer data were leaked from Equifax, that costs more than $600 million to the well-known credit reporting agency.…Critical
- HTTP Dictionary AttacksIt was a common measure for the developers to auto-generate file list as an index page by using web servers functionality. Nowadays it is a…Low
- HTTP Dir TraversalDir traversal Attack aims to access files and folders that are available on the server as a result of poor server-side coding and/or…High
- HTTP Header Injection VulnerabilityHTML header uses CRLF to split the header and the main body of the HTML message. An attacker may send CRLF characters to split the header…Medium
- HTTP Negotiation TechniquesWhen Apache mod negotiation is enabled with MultiViews options an attacker may easily brute force file names. Apache Web Server supports…Low
- HTTP Outdated VersionsHTTP is a protocol that uses TCP/IP Stack. Similar to telnet, the HTTP client also sends clear text commands to the HTTP server like GET,…Low
- HTTP PUT DEL Methods TestHTTP Protocol itself offers a set of instruction to operate files on the server without having a need for script interpreters such as PHP…High
- HTTP ShellShock ExploitALTERNATIVE NAMES Bashdoor AFFECTED SYSTEMS All UNIX based systems with Bash version 2.05b or lower. POC To check if your server is…
- Log4Shell VulnerabilityLog4Shell is a severely critical vulnerability that has been disclosed in December 2021 that affects the widely popular Log4j, which is an…
SSL/TLS & encryption
5 articles- Best Practices for the Services Using Microsoft Cryptography SuitesDefault installations of SSL over HTTP are essential but come with pre-settings which are not compatible with PCI-DSS on most systems. When…High
- How to disable weak ciphers for Apache on RedHat ServersDefault installations of SSL over HTTP are essential but come with pre-settings which are not compatible with PCI-DSS on most systems. Most…High
- How to disable weak ciphers for Nginx on RedHat ServersDefault installations of SSL over HTTP are essential but come with pre-settings which are not compatible with PCI-DSS on most systems. Most…High
- No SSLHTTP Protocol is currently only used for redirecting clear text communication to HTTPS protocol. In the early days, HTTP protocol was…Critical
- Preventing Mixed ContentSSL is used to encrypt the connection between the server and the client, nowadays most of the web pages and the images generated on demand.…
DNS & e-mail
5 articles- DNS Brute ProfilingDNS Remote Profiling is a technique which employs Internet forensic technologies and other DNS querying mechanisms to find current and…
- DNS Records MonitoringWe monitor your DNS records to notify you if an attacker takes over your domain name, DNS service or if there is a man in the middle…
- Google Malware ChecksOnlayer is periodically scanning your site with Google Malware Check API. Google is checking for malware patterns on your site while…
- Reverse DNS ChecksReverse DNS is a PTR record that points back to the domain name. RFC 1912 published by the IETF, recommends that every domain pointing to…
- SMTP Open Relay ChecksSimple Mail Transfer Protocol (SMTP) is an electronic mail communication protocol that became an internet standard with RFC 821 and was…
Network & remote access
5 articles- How to Disable TCP TimestampsAn attacker may reveal system uptime from TCP Timestamps. This allows the attacker to guess the version of the latest security patches…
- RDP Enumeration ChecksIf RDP is enabled on the default port, Onlayer will check and determine the security level of your server. If you get a FAIL result, the…
- SSH Authentication MethodsRegarding to PCI-DSS Regulation 8.3, a server open to Internet require multi factor authentication for any remote login session.
- SSH Host Key Change DetectionSSH Host Key Detection is used to inform you that host keys of the server are changed. A host key is changed in these scenarios: Remote…
- SSH Username EnumerationSSH Username Enumeration attack is used on OpenSSH Servers with public key authentication is enabled. This method was posted on 15 August…
Platform vulnerabilities
4 articles- Drupal VulnerabilitiesDrupal is an Open Source Web Content Management System (CMS) written in PHP. Like all other CMS Systems, Drupal is also vulnerable to…High
- IBM Domino VulnerabilitiesIBM Domino is used by the IBM Lotus Notes Client. IBM Domino is like what is to be an Exchange server for Outlook.Medium
- Oracle Siebel VulnerabilitiesOracle Siebel is a commercial enterprise Web Content Management System (CMS). Like all other CMS Systems, Oracle Siebel is also vulnerable…Medium
- TYPO3 VulnerabilitiesTYPO3 is an Open Source Web Content Management System (CMS) written in PHP. Like all other CMS Systems, TYPO3 is also vulnerable to…High