Monthly Archive for January, 2011

Show hidden files in proftpd

If you can’t see hidden files in proftpd ( files with a .(dot), like .htaccess), you can force the files to be displayed in almost all clients with a server wide variable in your proftpd.conf:

Chnge to -a if exists already or add to the bottom:
ListOptions -a

Restart proftpd and reconnect.

Testing network with iperf

If you need to measure network throughput and capacity, I haven’t found a simpler solution than iperf. There isn’t much to say about the operation of iperf — it’s a very simple application in server/client mode.

In short, iperf can be installed on two machines within your network. You’ll run one as a server, and one as a client.

First we need to install iprerf (debian and ubuntu way):
Continue reading ‘Testing network with iperf’

Enable CGI in Apache2


If you want to enable CGI support for you domain or subdomain.

Install Apache2 mod-perl module:

1
aptitude install libapache2-mod-perl2

Add this to the Apache configuration:

1
2
3
4
<Directory "/var/www/domain/cgi-scripts">
    Allow from all
    Options All FollowSymLinks MultiViews
</Directory>

Only scripts in directory /var/www/cgi-scripts can be executed as CGI.

How to Bruteforce SSH

SSH is an acronym which stands for Secure SHell, which provides a secure shell access to a remote machine.

This brut force tool is great to test some security stuff like iptables or sshguard.

You are able to see the proceeder of real hacking attempt.

Like most brute forcing tools, you’ll first need a pretty big passlist. You can get one from here:

wget http://debianuser.org/bruteforce/passlist.txt

Continue reading ‘How to Bruteforce SSH’

Nginx + apache2 = real-ip

Nginx and Apache2 are running great but there is only one tiny problem with the visitors ip’s.

Normaly I let my nginx instance do the logging job, but if you let your Apache do it you will get some problems. Apache will see all incoming requests as coming from localhost (127.0.0.1). Right they are all from nginx.
Continue reading ‘Nginx + apache2 = real-ip’