Press "Enter" to skip to content

Posts published in “Security”

Quickly Deploy Two Open Source Bastion Server Projects – Webterminal and Jumpserver

Published July 6, 2020 by john
1
Quickly Deploy Two Open Source Bastion Server Projects – Webterminal and Jumpserver Quickly Deploy Two Open Source Bastion Server Projects – Webterminal and Jumpserver

I was looking for a secure way to manage my cloud infrastructure and found those two projects in Guihub. Both provide a web GUI to support major remote management protocols to connect to remote targets.

Bastion server (Jump Server) connects your VMs, your local computers, and cloud resources without exposing them to public network connections. This bastion server or jump server can be treated as a single audit point for logging access to the remote targets. Both jump servers and bastion hosts are considered weak points and careful attention must be given to keep them up to date and monitored.

Enable Radius Authentication for CyberArk PAS

Published April 28, 2020 by john
0
Enable Radius Authentication for CyberArk PAS Enable Radius Authentication for CyberArk PAS

The CyberArk PAS Vault enables users to log on through RADIUS authentication (Remote Authentication Dial-In User Service) using logon credentials that are stored in the RADIUS server.  Lab Topology Install Radius Server You can install FreeRadius server as your Radius lab server based on steps in this post. Configure your Radius Server Create a client [root@localhost ~]# cd /etc/raddb/ [root@localhost raddb]# ls certs clients.conf dictionary hints huntgroups mods-available mods-config mods-enabled panic.gdb policy.d proxy.conf radiusd.conf README.rst…

Quick Install FreeRadius on CentOS7

Published April 28, 2020 by john
0
Quick Install FreeRadius on CentOS7 Quick Install FreeRadius on CentOS7

There are many ways to install FreeRadius with / without MySql, with/without Web GUI manager daloRadius. This post is to summarize the quickest steps to install FreeRadius on CentOS7.

It is assumed you have installed CentOS7 with minimal installation and updated to latest using 'yum -y update' command.

Install FreeRadius Components

[root@freeradius ~]# yum install freeradius freeradius-utils freeradius-mysql freeradius-perl –y
Before going to start configuration, we will now check whether our RADIUS server is running or not with the following command where radiusd is freeRADIUS daemon in CentOS Linux Distribution.
[root@freeradius ~]# systemctl status radiusd If you found that your radius daemon (radiusd) is not running, issue the following command to start radius daemon. [root@freeradius ~]# systemctl start radiusd Now you will find that your RADIUS server in running if you issue the status command again. Also issue the following command so that your radius daemon can run at the time of system restart. [root@freeradius ~]# systemctl enable radiusd

Install FreeRadius and Daloradius on CentOS 7

Published April 28, 2020 by john
0
Install FreeRadius and Daloradius on CentOS 7 Install FreeRadius and Daloradius on CentOS 7

FreeRADIUS is an open source RADIUS server commonly used on Linux, Unix and embedded systems. daloRADIUS is a web-based RADIUS management tool written in PHP. It was created to ease the management and administration of RADIUS server and hotspots devices (NAS). It comes with a powerful graphical reporting and accounting, billing and advanced user management features. This post will show the steps how to install FreeRADIUS and Daloradius on CentOS 7 Linux with minimum installation.…

Use Hihttps WAF to Protect Your Web Application

Published April 14, 2020 by john
0
Use Hihttps WAF to Protect Your Web Application Use Hihttps WAF to Protect Your Web Application

Recently found a interesting WAF Hihttps. Github address is https://github.com/qq4108863/hihttps and website is https://hihttps.com which says it has :

Unsupervised learning autonomous confrontation

himqtt / hihttps is a free web application firewall and IoT MQTT firewall with basic functions. It supports traditional security rule detection (such as SQL injection, XSS, malicious vulnerability scanning, password brute force cracking, CC, DDOS, etc.), and more importantly It is the unsupervised learning of the sample collected by the machine, which automatically generates the confrontation rules. Click to download the free version of CentOS 


Redefining cybersecurity