Category Archives: security

Apache cdorked backdoor detection

Posted on May 8, 2013 by

Apache Cdorked.A backdoor This is a pretty recent attack, using Cpanel to change the Apache httpd binary by a compromised one which embeds a backdoor. A few articles with more details are available here:   * http://www.welivesecurity.com/2013/04/26/linuxcdorked-new-apache-backdoor-in-the-wild-serves-blackhole/   * http://blog.sucuri.net/2013/04/apache-binary-backdoors-on-cpanel-based-servers.html It seems … Continue reading →

Posted in security | Tagged , , | Leave a comment

wordpress CMS brute force protection with HAProxy

Posted on April 26, 2013 by

Brute force attacks Brute force is a pretty simple type of attacks: it consists of massively send requests to a URL with different parameter each time. The main purpose is to try to find the right parameter combination. Usually, brute … Continue reading →

Posted in Aloha, security | Tagged , , , , | Leave a comment

Microsoft Remote Desktop Services (RDS) Load-Balancing and protection

Posted on April 10, 2013 by

RDS, RDP, TSE, remoteapp Whatever you call it, it’s the remote desktop protocol from Microsoft, which has been renamed during the product life. Basically, it allows users to get connected on remote server and run an application or a full … Continue reading →

Posted in Aloha, architecture, security, Virtual Desktop Infrastructure | Tagged , , , | 4 Comments

IIS 6.0 appsession cookie and PCI compliance

Posted on March 25, 2013 by

Synopsis You’re using HAProxy or the ALOHA Load-Balancer to load-balance IIS 6.0 web applications and you want them to pass successfully PCI compliance test. One of the pre-requisite is to force the cookie to be “HttpOnly”, in order to tell … Continue reading →

Posted in Aloha, HAProxy, layer7, security | Tagged , , , | Leave a comment

Mitigating the SSL Beast attack using the ALOHA Load-Balancer / HAProxy

Posted on January 21, 2013 by

The beast attack on SSL isn’t new, but we have not yet published an article to explain how to mitigate it with the ALOHA or HAProxy. First of all, to mitigate this attack, you must use the Load-Balancer as the … Continue reading →

Posted in Aloha, exchange 2010, Exchange 2013, HAProxy, security, ssl | Tagged , , , | Leave a comment