@noc_org

A CDN and WAF Designed for Hosts and MSPs. https://xitter.cf/t.co/zrdwKAlLni DNSArchive - Historical DNS and web metadata search: https://xitter.cf/t.co/G4kDIBOClW

noc.org
Joined July 2020
  • Tweets128
  • Following21
  • Followers112
4Media
noc.org retweeted
Daniel Cid
@danielcidJul 18
Multiple scans going for the wpshell vulnerability (RCE on WordPress core). Better update it now: slcyber.io/research-center/w… And/Or block the URLs they recommend: /batch/v1 in the REST API. *Sites behind the NOC.org WAF are already covered/blocked.

wp2shell: Pre Authentication RCE in WordPress Core

Critical issue discovered in WordPress Core affecting the majority of WordPress-built sites. A pre-authentication Remote Code Execution (RCE) that can be used by attackers to run malicious code to...

slcyber.io
1
2
1
12
2,128
Expanded DNSArchive to also add web headers, CMS versions, links , css files, etc. You can now search for it here (in beta): dnsarchive.net/web-search Ex: All sites using PHP/5.2: dnsarchive.net/web-search?q=… And you can still do DNS specific search here: dnsarchive.net/search Feedback welcome!

DNSArchive Web Search | Analyze Website Metadata, Headers & Patterns

Investigate live website metadata including headers, redirects, jsfile, CMSs, technologies, and outbound links. Find patterns across suspicious sites and support malware and threat analysis. Identify...

dnsarchive.net
6
13
939
Have you noticed this "?slince_golden=test" requests on your logs? It is for a WordPress Backdoor. We wrote a small summary about it here: trunc.org/learning/slince_go… Seeing it on your logs too?

Investigating the 'slince_golden' WordPress Backdoor

What is the slince_golden WordPress backdoor? Detailed analysis of repeated attacks targeting fake WordPress files using the 'slince_golden' backdoor parameter.

trunc.org
3
4
351
🚀 @logwithtrunc just got a fresh redesign. 🧑‍💻 Built for developers who care about clean, fast, secure log management. 🔍 Check it out: trunc.org/ #SIEM #LogManagement #CyberSecurity #DevTools #SecOps #Infosec #CloudSecurity

Trunc - A SIEM and Log Management Platform. Log analysis and log storage in the cloud. All your...

Trunc is a cloud-based SIEM and Log Management platform in the cloud. All your logs. One place. Simple. Affordable.

trunc.org
1
4
6
344
Have you looked at our DNS database? DNS Archive has over 200m domains, IP addresses and historical DNS data: dnsarchive.net/

DNSArchive | DNS, rDNS, IP intelligence feed, Web metadata Search & Threat Intelligence

Explore historical DNS records, domain changes, web search data, and IP reputation. DNSArchive powers threat intelligence and investigations. DNS Repository and DNS / IP discovery.

dnsarchive.net
2
4
217
Application layer DDoS attacks mimic user traffic to exhaust resources. Learn how to detect and defend against them. #CyberSecurity #DDoS #WebSecurity loom.ly/pJ3hwcc
62
Protocol DDoS attacks exploit network vulnerabilities to disrupt services. Learn how to protect your systems. #DDoS #CyberSecurity #NetworkProtection loom.ly/5IEg99w
48
Volumetric DDoS attacks flood bandwidth with traffic, disrupting services. Learn how to defend against them. #DDoS #CyberSecurity #WebProtection loom.ly/O-ZAfa4

Support & Documentation | NOC.org

NOC platform setup guides, account management, hosting configuration, product features, and troubleshooting documentation.

noc.org
34
Understanding DDoS attacks and how to mitigate them is key to protecting your website. Explore strategies and solutions. #CyberSecurity #DDoS loom.ly/BRzuPWU
24
Arbitrary Code Execution (ACE) allows attackers to run malicious code. Learn how to prevent this critical threat! #CyberSecurity #InfoSec #CodeExecution loom.ly/n0urdYM
23
Directory Traversal lets attackers access sensitive files by exploiting path flaws. Learn its risks & prevention tips! #CyberSecurity #WebSecurity #DirectoryTraversal loom.ly/edacRwQ

Directory Traversal Attacks Explained | NOC.org

Understand directory traversal attacks, how attackers use ../ sequences to access restricted files, and how path normalization and WAFs prevent them.

noc.org
19
SQL Injection (SQLi) is a major security risk. Learn its types, impacts & prevention tips with secure coding & WAFs. #CyberSecurity #SQLi #WebSecurity #DataProtection loom.ly/_KF0gc4

SQL Injection (SQLi) Explained | NOC.org

Learn how SQL injection attacks work, how attackers exploit database queries through user input, and how to prevent SQLi with parameterized queries and WAFs.

noc.org
11
Hosting your own payment pages? Stop! Use hosted solutions & CSP headers to block online threats. #EcommerceSecurity #Cybersecurity #PCICompliance loom.ly/qFEW5Fo
1
17
Hosting your own payment pages? Stop! Use hosted solutions & CSP headers to block online threats. #EcommerceSecurity #Cybersecurity #PCICompliance loom.ly/ndr4uSU
15
Software vulnerabilities like #BufferOverflows & #SQLInjection can lead to cyberattacks. Learn how these flaws are exploited & how #OWASP helps improve #Cybersecurity. #InfoSec #AppSec loom.ly/Slz6Jw8

Software Vulnerabilities Explained | NOC.org

Learn what software vulnerabilities are, how they are discovered and classified with CVEs, and why patching and responsible disclosure matter.

noc.org
1
1
216
Protect your domain emails from phishing & spoofing! Learn SPF, DKIM, DMARC & more for email security. Start now: loom.ly/NYdeSM4 #CyberSecurity #EmailSecurity #TechTips
18
Logging is an important part of security, how are you recording, analyzing and storing your web server logs? #logmanagement #siem
Trunc Project@logwithtrunc25 Nov 2024
Learn why monitoring server logs matters: Boost security, optimize performance, fix issues fast, track user behavior & stay compliant! #CyberSecurity #siem loom.ly/mpPQc7U

Top 5 Reasons to Monitor Web Server Logs for Better Security & Performance

Learn the top 5 reasons why monitoring web server logs is crucial for your website. Boost security, optimize performance, ensure compliance, and gain insights to enhance user experience. Don't miss...

trunc.org
22
Learn how registries, registrars, and DNS power the internet. Gain insights and take control of your domain. #DNS #DomainManagement #TechTips loom.ly/JCXVTr8
16
WAFs and CDNs safeguard against protocol DDoS attacks by filtering traffic and dispersing loads. Learn how they protect your site. #DDoS #WebSecurity #CDN loom.ly/UsoGr7A

How a Web Application Firewall (WAF) and Content Delivery Network (CDN) Mitigate Protocol Attacks

How WAFs and CDNs work together to filter malicious traffic, distribute load, and maintain availability during protocol-layer attacks.

noc.org
1
2
200
Introducing a new feature that allows you to sinkhole bad actors using a website honeypot #security #webappsecurity #waf #hosting cc @danielcid @perezbox noc.org/blog/creating-honeyp…
1
181
more replies
These scans are fingerprinting your application, looking for things that exist that could be exploitable. We would consider these strong indicators of malicious intent. Needless to say, there is no need to allow them to continue.
1
99
Via our Honeypot feature you can now sinkhole the IP automatically via the WAF. You can also be sneaky and customize the responses so the bad actor doesn't know they've been blocked, allowing them to continue their tactics with no impact to you.
78
Load more