11.15 CentOS 8 Single User mode
boot到grub時按e編輯任一個項目
在第二行的ro改成rw 行尾加上single
按ctrl-x可以reboot進入系統
輸入root password或者按ctrl-D直接進入
但是虛擬機管理介面如果沒有tty1時 無法進入
10.29 Slow HTTP Denial of Service Attack (Slowloris)
站長日誌 109.10.29 弱點掃描偵測到Slow HTTP Denial of Service Attack弱點一隻 Server-Specific Recommendations Applying the above steps to the HTTP servers tested in the previous article indicates the following server-specific settings: Apache Using the < Limit > and < LimitExcept > directives to drop requests with methods not supported by the URL alone won’t help, because Apache waits for the entire request to complete before applying these directives. Therefore, use these parameters in conjunction with the LimitRequestFields , LimitRequestFieldSize , LimitRequestBody , LimitRequestLine , LimitXMLRequestBody directives as appropriate. For example, it is unlikely that your web app requires an 8190 byte header, or an unlimited body size, or 100 headers per request, as most default configurations have. Set reasonable TimeOut and KeepAliveTimeOut directive values. The default value of 300 seconds for TimeOut is overkil...
留言
張貼留言