Learn Server Security With BitNinja – Gabriel Avramescu

Salepage link: At HERE. Archive: https://archive.is/fkM5w

There are a lot of courses out here about offensive security and penetration testing. They are extremely useful. But even if you are a penetration tester, security consultant, a linux administrator or a developer, you should also have to know how to fix your security. How to protect actively (so in real time) and reactively your linux servers. And this is not an easy task, believe me, I hack websites and servers for living. And at the end of the audit, I have to give a report about how I did it and how to protect against attacks like mine.

So wouldn’t be easy if you would really on an actively working Web Application Firewall, Firewall and Intrusion Prevention System. To have an all in one product easily manageable, that would know the attacks and prevent them from being successful?

This course is all about this. It is about protecting your server. You will witness different attacks and you will see a product like this in action. This product is called BitNinja and it is an All in one security for Linux Servers. So you can see the attacks but also you will see how to protect against them.

It’s very important to know that BitNinja is a commercial, subscription-based product. Hovewer, for this training, you will have an extended free trial so you can test it in your lab environment or even in production.

This is a hands-on training based on demos. So a basic knowledge of Linux would be very useful.

Interested in learning more about the product? Feel free to browse https://bitninja.io

So what are the topics we will discuss about:

• We will start with an overview of a WordPress Attack. We will scann a website hosted on WordPress and exploit its vulnerabilities. Furthermore we will upload a backdoor so we can have remote access to the target server.
• Then we will dig in Bitninja. We will begin by installing and registering the product and see it’s main features. We will talk then about proactive protection mechanisms such as IP Reputation, Port Honeypots, Web Honeypots, DoS Detection and WAF Modules.
• We will continue with reactive protection mechanisms such as Malware Detection, Outbound WAF and we will see bitninja-cli capabilities.
• Furthermore, we will find sources of an infection and spamming and source of outbound attacks.
• In the end we will learn about troubleshooting and how to find a trouble maker IP. I think you will enjoy all of this.

How BitNinja Works

• Easy setup– Enjoy immediate protection on your server. BitNinja is designed to install and work with as little human interaction as possible. Run one line of code and your server is protected from 99% of attacks.
• All-in-one protection– BitNinja combines the most powerful server security software in one easy-to-use protection suite. You get full-stack protection against XSS, DDoS, malware, scans, script injection, enumeration, brute force and other automated attacks — on all major protocols, not only HTTP(S).
• Machine learning– Servers protected by BitNinja learn from each attack and inform each other about malicious IPs. This result is a global defense network that counteracts botnet attacks with a shield of protection for all servers running BitNinja, while also reducing the number of false positives each server encounters.

Course Curriculum

Introduction

• Promo Video (2:00)
• Let’s meet (5:30)
• Lab Setup (1:46)
• Lab Setup – Login Information and Download Links

Overview of a WordPress attack

• Commands to be used in the next section
• Scanning for wordpress vulnerabilities (10:26)
• Exploiting a remote code execution vulnerability (9:18)
• Uploading a backdoor (7:36)
• Sending spam (17:20)

Basics

• Registration and Installation – Useful Information
• Registration and installation (8:51)
• IP Reputations. IP lists – User vs Global lists. Greylisting, Blacklists, Whitelist (16:57)
• HTTP CAPTCHA (8:35)
• SMTP CAPTHCA (4:27)
• Commands used in SSLTerminating Lecture
• SslTerminating Module (32:12)
• SslTerminating Module – Adding Certs Manually (5:00)

Proactive protection mechanisms

• Commands to be used in this section
• Port Honeypots (7:57)
• Web Honeypots (10:11)
• DoS Detection and Protection (10:53)
• Log Analysis (3:17)
• WAF – Web Application Firewall (20:33)
• Demo – Log Analysis and WAF (8:29)

Reactive protection mechanisms

• Malware Detection (6:57)
• Outbound WAF (2:04)
• Demo – Malware Detection and Outbound WAF (11:33)
• Blacklist/Whitelist and Country level blacklist/whitelist (11:35)
• bitninja-cli (7:42)

The “How To” Section

• How to find the source of an infection (9:41)
• How to find the source of spamming (16:38)
• How to find the source of outbound attacks (10:56)
• Security daily routine (4:58)
• Attack trend analysis (4:55)

Troubleshooting

• CDN integrations (4:23)
• Finding a trouble-maker IP (9:34)
• Further Reading