Posts

Showing posts from 2018

Avoiding JBoss 6 vulnerability of JMX Console, EJBInvokerServlet and JMXInvokerServlet

Out of the box installation of Jboss will get you a lot of useful utilities to administer your application server as per your need. But, when accessible from the open internet, these utilities will need to be secured so hackers can't exploit these vulnerability by submitting their requests in order to gain access to the server: EJBInvokerServlet and JMXInvokerServlet Shutdown the JBoss application server Remove the /tmp and /work directories Remove the following folders from the JBoss expanded package: Jboss-home/server/default/deploy/http-invoker.sar Jboss-home/server/default/deploy/jmx-console.war Jboss-home/server/default/deploy/jmx-console-activator-jboss-beans.xml Restart the server and the following URLs shouldn't be accessible: http://localhost:8080/invoker/EJBInvokerServlet http://localhost:8080/invoker/JMXInvokerServlet

Configure Reset GitLab credentials from Command Line

If you're receiving the following error message when trying to do git pull from the command line, then possibly trying to reset the credentials in the git config might help: PS C:\Tools\my-builds> git clone http:// / / .git Cloning into ' '... remote: HTTP Basic: Access denied fatal: Authentication failed for 'http:// / / .git' The following command will reset the credentials in git configuration, so you can reenter them: PS C:\Tools\my-builds> git config --system --unset credential.helper PS C:\Tools\my-builds> git clone http:// / / .git Cloning into ' '... Username for 'http:// ': : Password for 'http:// ': ': remote: Counting objects: 1184, done. remote: Compressing objects: 100% (160/160), done. remote: Total 1184 (delta 294), reused 352 (delta 243) Receiving objects: 100% (1184/1184), 496.40 KiB | 970.00 KiB/s, done. Resolving deltas: 100% (840/840), done. PS C:\Tools\my-builds>