WEBVTT 00:00.630 --> 00:02.730 Elephants will come back in this lesson. 00:02.730 --> 00:06.500 We're going to talk about how to secure your apache web server. 00:06.600 --> 00:11.720 In our previous lesson we learn how to install and configure the server. 00:11.830 --> 00:16.050 Again now it's time to protocols so we're against the hacker attacks. 00:16.050 --> 00:16.400 OK. 00:16.500 --> 00:17.850 So let's get practical. 00:17.870 --> 00:20.590 How good would this OK. 00:20.690 --> 00:27.090 The first attack that I want to show you is knowing the sewer name and version name. 00:27.180 --> 00:27.490 OK. 00:27.500 --> 00:31.720 Hackers can use this technique you know more. 00:31.730 --> 00:34.420 So where your web site is running OK. 00:34.430 --> 00:37.250 What's the word and what the numbers are that Petchey. 00:37.490 --> 00:41.490 OK so first of all let's see how this attack can be performed. 00:41.930 --> 00:42.700 OK. 00:43.220 --> 00:47.100 Let's take your IP address here and get like this. 00:47.120 --> 00:47.400 OK. 00:47.420 --> 00:49.900 This is our Web site our Web page. 00:49.970 --> 00:57.620 So what hackers does is just search for a directory which does not present like this and it and so in 00:57.640 --> 01:01.190 response or so the word display does so. 01:01.610 --> 01:02.070 OK. 01:02.180 --> 01:03.770 That is a bet you. 01:04.190 --> 01:06.740 And the server that you want to so. 01:06.870 --> 01:07.310 OK. 01:07.460 --> 01:16.730 So by knowing this Apache was in word and our operating system hacker can easily know what abilities 01:16.760 --> 01:24.090 are present for these so us Hagana and by getting that he can easily hack US system. 01:24.380 --> 01:24.920 OK. 01:25.280 --> 01:28.050 So pre-picked against this attack. 01:28.130 --> 01:44.350 What do you need to do is just go to DC to get here and open this with sudo access Becci to dot com. 01:45.170 --> 01:47.780 Sorry. 01:48.150 --> 01:48.840 Why. 01:49.080 --> 01:49.630 OK. 01:50.030 --> 01:51.020 Can hear. 01:51.180 --> 01:57.840 What do you need to do is you just need to hear these new lines of call. 01:57.860 --> 02:04.360 There is so signature on and off. 02:04.700 --> 02:05.200 OK. 02:05.380 --> 02:07.290 None of that. 02:07.430 --> 02:15.900 So Wilkens quickly adding these blue lines of call you can protect. 02:15.920 --> 02:19.260 You are so against this attack. 02:19.260 --> 02:20.580 OK. 02:20.750 --> 02:25.840 Just write it down and they start upset. 02:25.880 --> 02:31.560 So does that kick start. 02:31.770 --> 02:37.560 Sorry. 02:37.580 --> 02:42.110 So you're supposed to stop it now. 02:42.450 --> 02:45.440 Let's try to perform the same thing again. 02:46.610 --> 02:48.140 Let's do it easy. 02:48.510 --> 02:48.800 OK. 02:48.800 --> 02:53.890 Here you can see now we can get the words in number and the set of name here. 02:54.980 --> 02:56.890 By adding these two lines of code. 02:56.890 --> 02:59.490 You can protect against this attack. 02:59.810 --> 03:02.860 The next techies are directory browsing. 03:03.320 --> 03:04.720 So what is directory browsing. 03:04.760 --> 03:05.100 OK. 03:05.150 --> 03:11.630 First of all let's get inside that W.W.. 03:11.690 --> 03:14.520 Sorry. 03:14.920 --> 03:15.380 OK. 03:15.410 --> 03:19.520 Here w you then DML. 03:22.200 --> 03:25.450 Here you can see in the Scottish D.M. file is present here. 03:25.450 --> 03:30.040 It is our main file for the website and records here. 03:30.100 --> 03:34.220 You create a new directory here with sudo access. 03:34.240 --> 03:34.680 OK. 03:34.790 --> 03:39.830 Sudo Cadia are an office. 03:40.290 --> 03:41.170 OK. 03:41.470 --> 03:51.980 Inside this Creative X-Fi go touch has stopped the XTi. 03:52.120 --> 03:56.650 Inside s directory there is a file estopped the XTi. 03:56.650 --> 04:03.450 Now open this file and have some data. 04:03.490 --> 04:04.960 This is detest. 04:05.560 --> 04:08.930 Understand the concept. 04:12.230 --> 04:20.750 Not directly browsing Kogut. 04:21.000 --> 04:27.880 OK now we added a Mubarak tree and inside the directory file is present. 04:28.220 --> 04:33.600 So just trying to do here like this as an end. 04:34.050 --> 04:40.920 OK so what happens is it reveals that directly contente update is a start the active file. 04:41.150 --> 04:45.190 When you click this it will reveal this information. 04:45.320 --> 04:53.270 OK so hackers can perform these kinds of attacks and they can get to know the intimate information or 04:53.270 --> 04:55.990 they can get you or so school. 04:56.100 --> 04:56.470 OK. 04:56.490 --> 05:03.560 So to protect against these kinds of attacks what you need to do is you just go to the same file again 05:05.330 --> 05:06.050 see the 05:12.940 --> 05:13.940 Sudol. 05:14.410 --> 05:16.640 Why go. 05:16.660 --> 05:20.810 Why bet Betty got caught. 05:21.920 --> 05:24.210 Again here you need to insert. 05:24.490 --> 05:29.540 OK this call is directory. 05:29.900 --> 05:39.180 OK that W.W. limit after this. 05:39.460 --> 05:42.050 Options here. 05:42.090 --> 05:42.640 Hyphen 05:46.020 --> 05:46.830 in excess. 05:46.860 --> 05:47.850 OK. 05:48.450 --> 05:51.460 And make sure you pay as I'm typing. 05:51.510 --> 05:52.440 OK. 05:52.930 --> 05:57.850 Don't give any space or extra space there in case of this opportunity. 05:57.850 --> 06:01.180 Next is big as it is and 06:04.040 --> 06:09.130 like this are good enough to do this. 06:11.690 --> 06:13.190 Now restored. 06:13.430 --> 06:13.940 Betty 06:18.410 --> 06:29.020 hogi Suro service is to start again now is to start now less time to perform the same thing here. 06:29.410 --> 06:30.310 That's OK. 06:30.340 --> 06:32.250 Now is not showing anything. 06:32.330 --> 06:35.640 It says you don't how you shouldn't pay taxes on this. 06:35.650 --> 06:42.650 So all we get in this way we can protect against this directly rousing attack. 06:42.690 --> 06:46.210 The third thing that you need to do is you need to keep a bet. 06:46.260 --> 06:48.310 You bet you vergin regularly. 06:48.420 --> 06:51.590 OK so who approved you are Apache. 06:51.590 --> 07:07.490 What you need to do is you just need sudo apt get install He Petchey to reinstall after performing this 07:07.490 --> 07:08.060 operation. 07:08.060 --> 07:13.810 It will reinstall or update the good and the battery was in OK. 07:14.420 --> 07:23.840 The next pipe up attack is the didas attacks or by sending a huge amount of request to your server and 07:24.130 --> 07:29.850 but that good or hacker can perform it didn't start back and you are so work goes down. 07:30.010 --> 07:32.560 OK so protect against this attack. 07:32.660 --> 07:38.490 What do you need to do is just file again here. 07:39.660 --> 07:46.600 Why patch you through the court or get product against the DASAR tag. 07:46.760 --> 07:52.050 I cannot show you here the demonstration for it because it takes a lot of time. 07:52.310 --> 08:07.940 OK so to protecting against this I just state the directory that W W is DML and you can do this for 08:07.940 --> 08:09.500 a particular directory. 08:09.500 --> 08:14.650 Suppose I want to in meeting the request for the esoterically then I can type like this. 08:14.670 --> 08:23.600 It is the main directory so that's why I am going to do this for it. 08:25.020 --> 08:28.260 The worst part of it. 08:28.550 --> 08:31.310 I want only 10000 request. 08:31.500 --> 08:33.550 OK for our server 08:36.930 --> 08:39.050 directory this way. 08:39.240 --> 08:44.350 Just like the down restart 08:52.090 --> 08:52.970 log. 08:53.410 --> 08:57.700 OK the server is restarted here because we don't get any error here. 08:57.880 --> 09:01.760 That means somewhere in our configuration is added successfully. 09:02.010 --> 09:02.400 OK.