Home - Infobase

Host Scan(5)

Host Scan or Port Scan is a process to use computer tool to probe a server or host for open ports. Such an application may be used by administrators to verify security policies of their networks and by attackers to identify network services running on a host and exploit vulnerabilities.

Show ALL

Application Scan(1)

Application Scan is a security assessment to website, web services and mobile application for any weaknesses, technical flaws, or vulnerabilities, evaluate the security of the applications.

Show ALL

Network Scan(1)

Network scanning helps to detect all the active hosts on a network and maps them to their IP addresses. Network scanners send a packet or ping to every possible IP address and wait for a response to determine the status of the applications or devices (hosts).

Show ALL

Security Domain	Access Control Security
Risk Type	Password Complexity
Risk Description	Password Complexity not enabled Password Complexity requirement is not being mandated. In order to combat password brute forcing attack, the password chosen must be complex in nature. Passwords must be both long and complex; comprised of numerals, mixed-case letters, and special characters. They also should not be words, or be names of anything which could be associated with their owner. Finally, passwords must be changed frequently.
Fix	Use Windows Policy Editor Press Windows Key & R to enable RUN secpol.msc

Security Domain	Operation Security
Risk Type	Time Synchronisation
Risk Description	Time synchronisation not enable From the assessment, it was found that the system clock was not yet configured. It did not configure to synchronise with a legitimate time server (now using local clock in CMOS) for the Windows Servers. Without such synchronisation, the accuracy of the system clock on the notebook was not guarantee. As a result, all time based activities running on the equipment would be affected. For example, the time-stamp of audit trails cannot be trusted, causing correlation between events harder and audit trails less credible during incident investigation. An unsynchronized clock would also make some systems more vulnerable to Replay and DoS Attacks. From IT Security Guidelines, Information systems shall synchronise its clock with a trusted time server periodically (at least once per month).
Fix	Open Control Panel Click on Clock, Language, and Region Click on Date and Time Click on the Internet Time tab Click the Change settings button Date & Time

Security Domain	System Acquisition, Development & Maintenance
Risk Type	Disable Everyone Access From Network
Risk Description	According to the Baseline IT Security Policy, data access rights shall be granted to users based on a need-to-know basis. [Baseline IT Security Policy (S17) v6.0 December 2016, Section 11.2.2]. Remove "Everyone" under Local Policy/User Rights Assignment and "Authenticated Users" may be used instead.
Fix	Local Policy Editor secpol.msc Local Policy/User Right Assignment Remove Everyone from List

Security Domain	Access Control Security
Risk Type	lockout Threshold
Risk Description	Lockout threshold should be implemented No Lockout threshold was implemented to control the numbers of failed login attempts. Currently, there is no pre-set value to logout out accessing the identified hosts, to prevent consecutive failed logins attempts. This provides opportunities for the Hackers to carry out brute-force attempt against the underlying information system. Using it properly, the Account lockout threshold is a useful method for slowing down online password-guessing attacks as well as to compensate for weak password policies.
Fix	Local Policy Editor secpol.msc Account Policy/Account Lockout Policy

Security Domain	Communication & Operations Security
Risk Type	Last Username Displayed
Risk Description	Last Username displayed The identified hosts are found with windows security options "interactive logon: Do not display last user name" disabled.
Fix	Local Policy Editor secpol.msc Group Policy Editor gpedit.msc Computer Configuration, expand Windows Settings, and then expand Security Settings Expand Local Policies, and then click Security Options In the right pane, double-click Interactive logon: Do not display last user name. Account Policy/Account Lockout Policy

Security Domain	Cryptography
Risk Type	Ssl Version
Risk Description	SSL Version 2 and 3 Protocol Detection The remote service accepts connections encrypted using SSL 2.0 and/or SSL 3.0. These versions of SSL are affected by several cryptographic flaws, including: - An insecure padding scheme with CBC ciphers. - Insecure session renegotiation and resumption schemes. An attacker can exploit these flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected service and clients. Although SSL/TLS has a secure means for choosing the highest supported version of the protocol (so that these versions will be used only if the client or server support nothing better), many web browsers implement this in an unsafe way that allows an attacker to downgrade a connection (such as in POODLE). Therefore, it is recommended that these protocols be disabled entirely. NIST has determined that SSL 3.0 is no longer acceptable for secure communications. As of the date of enforcement found in PCI DSS v3.1, any version of SSL will not meet the PCI SSC's definition of 'strong cryptography'.
Fix	Edit http-ssl.conf Depend on your xampp installation, assume xampp is installed in c:\xampp Open c:\xampp\apache\conf\extra\http-ssl.conf Around line 79, there should be a line SSLProtocol all -SSLv3 Remark it #SSLProtocol all -SSLv3 Add a new line with SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1

Security Domain	System Acquisition, Development & Maintenance
Risk Type	Directory Browsing
Risk Description	Directory Browsing enabled It is possible to view the directory listing. Directory listing may reveal hidden scripts, include files, backup source files, etc. which can be accessed to read sensitive information.
Fix	Eidt httpd.conf Depends on xampp installed directory, assume xampp is installed at c:\xampp Open C:\xampp\htdocs\apache\conf\httpd.conf Around line 266 Options Indexes FollowSymLinks Includes ExecCGI Remark it # Options Indexes FollowSymLinks Includes ExecCGI Save file restart apache

Security Audit

Host Scan(5)

Purpose

Application Scan(1)

Purpose

Network Scan(1)

Purpose