Securing Apache [Debian Linux]

Published: 16 August 2021
on channel: OsbornePro TV

2,204

Securing Apache [Debian Linux]
I (tobor), demonstrate how to secure an Apache server on a Debian based Linux system and show some of the reasons behind them. If you like what you see please subscribe!

COMMANDS TO USE WHAT I USED
sudo apt update && sudo apt install -y apache2 apache2-utils libapache2-mod-security2 libapache2-mod-evasive
sudo a2enmod ssl headers security2 socache_shmcb unique_id rewrite

CONFIGURATION TEMPLATES
Fail2Ban (Not Covered in video for brevity and possible other video)
https://github.com/OsbornePro/ConfigT...

Default-SSL File
https://github.com/OsbornePro/ConfigT...

SSL Module Conf File
https://github.com/OsbornePro/ConfigT...

Security2 Module Conf File
https://github.com/OsbornePro/ConfigT...

Apache2.conf File
https://github.com/OsbornePro/ConfigT...

000-Defaut Site Conf File
https://github.com/OsbornePro/ConfigT...

0:00 Intro Summary
1:17 What to install and enable
1:55 Unique ID Module
2:14 Apache user least privilege
4:01 Disabling unused HTTP Request Methods (TRACE, TRACK)
6:32 Rewrite Rules for security
11:45 Hiding Version and OS Info (Using Apache Config)
13:48 Hiding Version and OS Info (Security2 Module)
15:37 Custom Error Pages
16:57 Delete available online apache docs (Older versions)
17:41 Turn ETags off
19:04 Secure Headers you can use
24:28 Create a Diffie Hellman Key
26:47 Strong TLS suites and ciphers
29:00 Using OCSP Stapling
31:45 Directory Traversals
32:40 Dont use .htaccess
35:40 Other settings to help against DoS related attacks
37:16 Thanks for watching!

View my Verified Certifications!
https://www.credly.com/users/robertho...

Follow us on GitHub!
https://github.com/tobor88
https://github.com/OsbornePro

Official Site
https://osbornepro.com/

Give Respect on HackTheBox!
https://www.hackthebox.eu/profile/52286

Like us on Facebook!
/ osborneprollc

View PS Gallery Modules!
https://www.powershellgallery.com/pro...

The B.T.P.S. Security Package
https://btpssecpack.osbornepro.com/

Watch video Securing Apache [Debian Linux] online, duration hours minute second in high quality that is uploaded to the channel OsbornePro TV 16 August 2021. Share the link to the video on social media so that your subscribers and friends will also watch this video. This video clip has been viewed 2,204 times and liked it 43 visitors.

1,265