Add the following lines to your httpd.conf: SSLProtocol ALL -SSLv2 SSLCipherSuite HIGH:!SSLv2:!ADH:!aNULL:!eNULL:!NULL To Test the Fix (replace 127.0.0.1 with whatever ip you need to test on): openssl s_client -port 443 -host “127.0.0.1” -ssl2
Fport is a very handy tool to determine which ports are mapped to which process. You can download it here From Foundstone (creators of tool): “fport reports all open TCP/IP and UDP ports and maps them to the owning application.…
Want to learn how to hack a website? This tutorial -> explains how to attack and defend against: Cross-Site Scripting (XSS) Client-State Manipulation Cross-Site Request Forgery (XSRF) Cross Site Script Inclusion (XSSI) Denial of Service Code Execution Configuration Vulnerabilities…
