The document summarizes vulnerabilities found in a LAMP server including server side injection (SSI), cross site scripting (XSS), and denial of service/distributed denial of service (DoS/DDos). Demonstrations of exploits for SSI injection, XSS, and a DoS attack are described. Recommendations are provided to secure against each vulnerability through methods like modifying file permissions, input filtering, firewall configuration, and load balancing.

1. Security Squad: LAMP SERVER
Vulnerabilities
Vincent Sibley, William Prentice,
Joshua Howell, Keevin Walden

2. Abstract
Purpose and goals
Demo of XSS, SSI injection, and DoS
Findings/Results
Conclusion
Questions

3. Introduction
The purpose of this project was to identify and explain
potential vulnerabilities using a LAMP server
We identified the following vulnerabilities with the LAMP
server: server side injection (SSI), cross site scripting
(XSS), and denial of service/distributed denial of service
(DoS/DDos)
Identified the commands needed in order to invoke a
DoS/DDoS attack using the target computer's IP
address or Default Gateway.

4. Demo DoS, XSS, and SSI Injection
SSI Injection demo find files on a server that are hidden
XSS Scripting enter cookie and steal cookie. Show proof in log.txt
The command used in the DoS attack is sudo hping3 --flood -S --rand-
source (Target Default Gateway)
Dos/DDos Attack
Ping 192.168.72.100 www.Yahoo.com

5. SSI
Enter commands in to search box
Access hidden files on the server

6. Results and Findings
SSI - Set correct permissions for files; create Mod_Security
filter to block any SSI format syntax
XSS - Secure website; use input/output filters to identify
and sanitize any potential XSS malicious code
DoS/DDos - Configure router and firewall settings; use
load balancers to balance traffic across the network or
anti-DDoS solution to filter DDoS traffic

7. Conclusion
A LAMP server with the default settings and protections is
an extremely high risk vulnerability to an organization.
To become more secure:
Change the default settings to emulate how your server
should be protected.
Use internal or external firewalls that are properly
configured to block any malicious incoming or outgoing
network traffic.