About XSS

After all the XSS i found, i finally decided to write all that i know about it.<br> <br> Table Of Contents:<br> 1. <a href="/2013/04/about-xss.html#1">What is Cross Site Scripting</a>?<br> 2. <a href="/2013/04/about-xss.html#2">Who does it hurt</a>?<br> 3. <a href="/2013/04/about-xss.html#3">What can be done with Cross Site Scripting</a>?<br> 4. <a href="/2013/04/about-xss.html#4">How to find it</a>?<br> 5. <a href="/2013/04/about-xss.html#5">How to avoid i</a>t?<br> <br> <br id="1"> 1. What is Cross Site Scripting?<br> --------------------------------------------

About XSS

After all the XSS i found, i finally decided to write all that i know about it. Table Of Contents: 1. What is Cross Site Scripting? 2. Who does it hurt? 3. What can be done with Cross Site Scripting?…

Read more »

Remove bad word from your site

Sometime when we need to block bad word or filthy words we need to install plugin, module and etc. Or sometime we spent money to block all bad word.<br> from what I know most of the bad word comes from bad bot. Sometime from google, bing or yahoo search query (HTTP_REFERER). to prevent bad bot come to your site you <a href="/2013/01/spammers-bad-bots-and-some-proxies.html" target="_blank">can refer my article here</a> and check bad user agent on <a href="http://www.projecthoneypot.org/harvester_useragents.php" target="_blank">project honey pot</a> or like this.<br> <br> <br> <pre style="font-family:arial;font-size:12px;border:1px dashed #CCCCCC;width:99%;height:auto;overflow:auto;background:#f0f0f0;;background-image:URL(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioGLmb-hQK_k3NcEuv4M23qo1WEp4FA9B4ou74WhFZAEWlK1bStKo3-M7hK3PeqxKIwAWrmgJb4fkpIQPSok8c64L0jLBtgCu9h9xzw9-40YQhAlVZa0hqyoLNS-nVSPOhkg0lRN9TRLhC/s320/codebg.gif);padding:0px;color:#000000;text-align:left;line-height:20px;"><code style="color:#000000;word-wrap:normal;"> RewriteCond %{HTTP_USER_AGENT} ^$ [OR] RewriteCond %{HTTP_USER_AGENT} ^(java|curl|wget) [NC,OR] RewriteCond %{HTTP_USER_AGENT} (winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner|Ezooms|Load_Impact) [NC,OR] RewriteCond %{HTTP_USER_AGENT} (libwww-perl|curl|wget|python|nikto|scan|webOS|Exabot|InAGist|UnwindFetchor|NING) [NC,OR] RewriteCond %{HTTP_USER_AGENT} (<|>|’|%0A|%0D|%27|%3C|%3E|%00) [NC] RewriteRule ^(.*)$ - [F] </code></pre> <br>

Remove bad word from your site

Sometime when we need to block bad word or filthy words we need to install plugin, module and etc. Or sometime we spent money to block all bad word. from what I know most of the bad word comes from ba…

Read more »

Activate window 8

Window 8..More faster and more GUI (graphical user interface) than window 7 even you using low specification hardware.<br> After installing window 8 on your computer you will ask for for activate it. Many people will use auto KMS or window loader to activate it. Now i will show you how to activate it manually. But need internet connection.<br> <br> First open cmd as administrator and you wil directly to directory "C:\Windows\system32". Dont change it. Just type this and press enter.<br> <br> <blockquote class="tr_bq"> <span style="font-size: large;">slmgr /upk</span></blockquote> <span style="font-size: large;"> <span style="font-size: small;">this will uninstall the product key. Then use this <span style="font-size: small;">command to install new product key.</span></span></span><br> <br>

Activate window 8

Window 8..More faster and more GUI (graphical user interface) than window 7 even you using low specification hardware. After installing window 8 on your computer you will ask for for activate it. Many…

Read more »

Increase cache timeout

In computer science, a cache is a component that transparently stores data so that future requests for that data can be served faster. The data that is stored within a cache might be values that have been computed earlier or duplicates of original values that are stored elsewhere. If requested data is contained in the cache (cache hit), this request can be served by simply reading the cache, which is comparatively faster. Otherwise (cache miss), the data has to be recomputed or fetched from its original storage location, which is comparatively slower. Hence, the greater the number of requests that can be served from the cache, the faster the overall system performance becomes. <a href="http://en.wikipedia.org/wiki/Cache_%28computing%29" target="_blank">Read full article about cache on wikipedia.</a><br> <br> This is a simple code on htaccess file to increase cache timeout.<br> <br>

Increase cache timeout

In computer science, a cache is a component that transparently stores data so that future requests for that data can be served faster. The data that is stored within a cache might be values that ha…

Read more »

Login facebook on share computer

First thing need to know, DONT TRUST ANYONE. Even your girlfriend. heheh..<br>When we submit or sign any forms such as login form in the browser we will leave autocomplete on each form. This means that email and other information will be stored on a shared computer.<br> And how can you does not see that email in the autocomplete form like facebook login? First you need to know your username. You can go to account setting to see your username or just click your profile.<br> <br> Is this your profile?

Login facebook on share computer

First thing need to know, DONT TRUST ANYONE. Even your girlfriend. heheh..When we submit or sign any forms such as login form in the browser we will leave autocomplete on each form. This means that em…

Read more »

XSS Protection

What is XSS protection ?<br> XSS mean <span class="st">Cross-site scripting is a type of computer security vulnerability typically found in Web applications. Due to breaches of browser security, XSS enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 84% of all security vulnerabilities documented by Symantec as of 2007. Their effect may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner. More information about XSS <a href="http://en.wikipedia.org/wiki/Cross-site_scripting" target="_blank">you can read here</a>.</span><br>

XSS Protection

What is XSS protection ? XSS mean Cross-site scripting is a type of computer security vulnerability typically found in Web applications. Due to breaches of browser security, XSS enables attackers to i…

Read more »

Blocked ip,host name and user agent

<br> Host currently block to access <a href="http://www.ezadnet.my/" target="_blank">http://www.ezadnet.my</a>. If we have remove or add ip/host/user agent from list we never mention here anymore.<br> <br> verizon.net<br> sucuri.net<br> builtwith.com<br> suttlessurvey.com<br> psychz.net<br> your-server.de<br> trendnet.org<br> comcastbusiness.net<br> steephost.net<br> steadyhost.ru<br> gigabytetelecon.com.br<br> hostinghutor.com<br> colocrossing.com<br> kvchosting.com<br> westcoasthosting.net<br> serverparlor.net<br> premiumwebserver.com<br> telkom.net.id<br> mrhost.biz

Blocked ip,host name and user agent

Host currently block to access http://www.ezadnet.my. If we have remove or add ip/host/user agent from list we never mention here anymore. verizon.net sucuri.net builtwith.com suttlessurvey.com psyc…

Read more »

DoS/DDoS attack

In computing, a denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a machine or network resource unavailable to its intended users. Although the means to carry out, motives for, and targets of a DoS attack may vary, it generally consists of the efforts of one or more people to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet.<br> <br> Distributed-Denial-of-Service (DDoS) attacks occur when multiple compromised systems are used to target a single system causing a Denial-of-Service (DoS) attack. Victims of DDoS attacks include the end targeted system as well as systems in the network path and all systems maliciously used and controlled by the hacker (or hackers) in the distributed attacks. When successful, DDoS attacks result in service downtime and great losses including short-term financial losses, long-term reputational losses and even permanent business disability, especially for businesses with core revenue generating functions. <br>

DoS/DDoS attack

In computing, a denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a machine or network resource unavailable to its intended users. Altho…

Read more »

Allow only Googlebot,yahoo and msn to access robots.txt

Many bot crawling your site will make your site high usage of bandwidth,<br> You can limit who can crawling your site like,<br> <br> -<a href="http://www.google.com/bot.html" target="_blank">Googlebot </a><br> Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

Allow only Googlebot,yahoo and msn to access robots.txt

Many bot crawling your site will make your site high usage of bandwidth, You can limit who can crawling your site like, -Googlebot Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.…

Read more »