Carlo Alberto Scola

Cyber Security passionate

My Personal Blog

That’s life, you know. We never end up where you thought you wanted to be. [M.E.]
26 Apr 2018

HTTP Headers security

Summary of HTTP headers useful and fundamental for securing web pages, clients, and communication from malicious activities. HSTS, CORS, CSP, HPKP and many many others.

categories: #notes

26 Apr 2018

SOP and XSS introduction

Malicious scripts are executed by the victim's browser because the browser trusts the source of the content, even when it's not coming from where it seems to be coming from.

categories: #notes

23 Apr 2018

XSSI and XSS differences

During an XSS malicious code is placed into a victim’s page, during an XSSI victim’s code is included in a malicious page. In an XSSI the attacker wants to leak data cross-origin.

categories: #notes

13 Mar 2018

SSH Reverse Tunnel - Raspberry Pi

How to set up a persistent, always available, SSH remote tunnel (reverse SSH tunnel).

categories: #linux #security

18 Feb 2018

Netdata cluster - Monitoring multiple server.

How to set up a netdata cluster monitoring multiple servers. One dashboard, multiple server monitoring instances.

categories: #linux #web

15 Feb 2018

Configuring Netdata on Ubuntu + apache proxy + authentication

Configuring netdata on ubuntu with SSL/TLS and Apache web server.

categories: #linux #web

15 Feb 2018

Configuring SSL/TLS for a domain on Apache2

How to set up SSL/TLS on Apache for securing web communication. Let's Encrypt certificate generation.

categories: #linux #web #security