Posts

Showing posts from September, 2023

web story

 poster image size is  640x853px

Apache or openlitespeed CustomLog to log full URL

Log Format   "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %{Host}i%U%q" LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %{Host}i%U%q" combined %{Host}i%U%q gives full url. "162.158.174.99 - - [24/Sep/2023:09:53:06 +0200] "GET /reune.php?tvhiduj-98468ujp/ucgiu HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.62 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" urlshortenerlink.com/reune.phptvhiduj-98468ujp/ucgiu"  find /usr/local/lsws/conf/vhosts/ -type f -name 'vhost.conf' -exec sed -i "s/.*CustomLog.*/    LogFormat '%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i"' combined &/g" {} \; successful.

python

Check for Iframes : If the element is within an iframe, you'll need to switch to the iframe context before locating the element.     # Switch to the iframe     driver . switch_to . frame ( "et-fb-app-frame" )     # Find the button by its tag name     button = driver . find_element ( By . TAG_NAME , "button" )     button . click ()     time . sleep ( 5 )  

srv record

  _sip._tls 14400 IN SRV 100 1 443 sipdir.online.lync.com. _sipfederationtls._tcp 14400 IN SRV 100 1 5061 sipdir.online.lync.com.

WordPress hardening methods

  Block PHP execution in untrusted folders  Go to  public_html  and you’ll see three folders called  wp-includes ,  wp-admin , and  wp-content , like so To protect your website from backdoor access files, you need to create a .htaccess file and upload it to your site’s/wp-includes/ and /wp-content/uploads/ directories. You need to paste the following code in your   .htaccess   file. <Files *.php> deny from all </Files> For openlitespeed  RewriteCond %{REQUEST_URI} ^.*(\/|php)$ [NC] RewriteRule .* - [F,L] Disable file editor in wp-config.php define( 'DISALLOW_FILE_EDIT', true ); Change security keys To log in easily, WordPress stores your credentials so you don’t have to enter your credentials every time you want to login. But what’s important here is that it’s stored in an encrypted form. https://api.wordpress.org/secret-key/1.1/salt/ copy paste from this url For busniess websites only Disallow plugin installations There are occasions when a user or a client might i

wordpress plugins

  WP Activity Log WP ACTIVITY LOG IS THE MOST COMPREHENSIVE ACTIVITY LOG PLUGIN FOR LOGGING USER AND SYSTEM CHANGES. auto wp post share to social revive old posts fs poster social auto poster nextscripts

immunify 360 cyberpanel error

 the requested was not found on this server /usr/local/CyberCP/public/imunifyav there will be no files here sh: 1: /usr/local/CyberCP/public/imunifyav/classes/panels/../../bin/execute.py: not found for both the error you need to reinstall immunify av first ssh  wget https://repo.imunify360.cloudlinux.com/defence360/imav-deploy.sh bash imav-deploy.sh this will fix error  remmber if you encounter any error on terminal for bash imav-deploy.sh similar to below [2023-09-10 09:32:16] Hit:24 https://download.imunify360.com/ubuntu/20.04/slot-8 focal InRelease [2023-09-10 09:32:19] Reading package lists... [2023-09-10 09:32:19] W: GPG error: https://download.docker.com/linux/ubuntu focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7EA0A9C3F273FCD8 [2023-09-10 09:32:19] E: The repository 'https://download.docker.com/linux/ubuntu focal InRelease' is not signed. [2023-09-10 09:32:19] apt-get update error. then remove  or c

uptime kuma

 I installed using docker cmd then from 7080 openlitespeed performed all this OpenLiteSpeed Create a new virtual host through the graphical admin like you normally would. Basic tab Name:  uptime-kuma Virtual Host Root:  /path/to/uptime-kuma Enable Scripts/ExtApps:  Yes External app tab Add a  web server  app type Name:  uptime-kuma Address:  http://localhost:3001 Context tab Add a  proxy  context URI:  / Web Server:  [VHost Level]: uptime-kuma Header Operations: Upgrade websocket Connection upgrade Access Allowed:  * Web Socket Proxy tab Add a  Web Socket Proxy Setup URI:  / Address:  127.0.0.1:3001 SSL tab (if needeed) Private Key File:  /path/to/ssl/key/privkey.pem Certificate File:  /path/to/ssl/cert/fullchain.pem Chained Certificate:  yes Perform a graceful restart and launch uptime-kuma. getaddrinfo EAI_AGAIN earnmoneyonline.vip 4f5e350a8484   mariadb:10.8         "docker-entrypoint.s…"   2 weeks ago   Up 12 days   3306/tcp               pushbluster_mariadb root@server2:

openlitespeed not listening on 443

tail -f /usr/local/lsws/logs/error.log  2023-09-09 05:38:36.866017 [INFO] [config:server:basics] bubbleWrap: 0, cmd: '(null)' 2023-09-09 05:38:36.883256 [INFO] [PlainConf] [httpServerConfig:] start parsing file /usr/local/lsws/conf/httpd_config.conf 2023-09-09 05:38:36.883291 [WARN] [PlainConf] [listener:SSL] Config file /usr/local/lsws/conf/httpd_config.conf #1738 line is too long!! just removed extra line  some line was added like this  ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@ after rebooted  the issue was fixed