← all publishers

cyberstrikeus

@cyberstrikeus source repo

Report this profile Claim this profile

• 7.2k skills
• 0 followers
• 1 day ago last updated

1. ▌
   Cis Apache 7 1 · cyberstrikeus

   Ensure mod_ssl and/or mod_nss Is Installed
   0 installs
2. ▌
   Cis Apache 7 2 · cyberstrikeus

   Ensure a Valid Trusted Certificate Is Installed
   0 installs
3. ▌
   Cis Apache 7 3 · cyberstrikeus

   Ensure the Server's Private Key Is Protected
   0 installs
4. ▌
   Cis Apache 7 4 · cyberstrikeus

   Ensure Weak SSL Protocols Are Disabled
   0 installs
5. ▌
   Cis Apache 7 5 · cyberstrikeus

   Ensure Weak SSL/TLS Ciphers Are Disabled
   0 installs
6. ▌
   Cis Apache 7 6 · cyberstrikeus

   Ensure Insecure SSL Renegotiation Is Not Enabled
   0 installs
7. ▌
   Cis Apache 7 7 · cyberstrikeus

   Ensure SSL Compression is Not Enabled
   0 installs
8. ▌
   Cis Apache 7 8 · cyberstrikeus

   Ensure Medium Strength SSL/TLS Ciphers Are Disabled
   0 installs
9. ▌
   Cis Apache 7 9 · cyberstrikeus

   Ensure All Web Content is Accessed via HTTPS
   0 installs
10. ▌
    Cis Apache 8 1 · cyberstrikeus

    Ensure ServerTokens is Set to 'Prod' or 'ProductOnly'
    0 installs
11. ▌
    Cis Apache 8 2 · cyberstrikeus

    Ensure ServerSignature Is Not Enabled
    0 installs
12. ▌
    Cis Apache 8 3 · cyberstrikeus

    Ensure All Default Apache Content Is Removed
    0 installs
13. ▌
    Cis Apache 8 4 · cyberstrikeus

    Ensure ETag Response Header Fields Do Not Include Inodes
    0 installs
14. ▌
    Cis Apache 9 1 · cyberstrikeus

    Ensure the TimeOut Is Set Properly
    0 installs
15. ▌
    Cis Apache 9 2 · cyberstrikeus

    Ensure KeepAlive Is Enabled
    0 installs
16. ▌
    Cis Apache 9 3 · cyberstrikeus

    Ensure MaxKeepAliveRequests Is Set Properly
    0 installs
17. ▌
    Cis Apache 9 4 · cyberstrikeus

    Ensure the KeepAliveTimeout Is Set Properly
    0 installs
18. ▌
    Cis Apache 9 5 · cyberstrikeus

    Ensure the Timeout Limits for Request Headers is Set to 40 or Less
    0 installs
19. ▌
    Cis Apache 9 6 · cyberstrikeus

    Ensure Timeout Limits for the Request Body Are Set Properly
    0 installs
20. ▌
    Cis Tomcat10 V110 9 3 · cyberstrikeus

    Disable deploy on startup of applications (Automated)
    0 installs
21. ▌
    Cis Tomcat101 10 10 · cyberstrikeus

    Configure maxHttpHeaderSize (Automated)
    0 installs
22. ▌
    Cis Tomcat101 10 11 · cyberstrikeus

    Force SSL for all applications (Automated)
    0 installs
23. ▌
    Cis Tomcat101 10 12 · cyberstrikeus

    Do not allow symbolic linking (Automated)
    0 installs
24. ▌
    Cis Tomcat101 10 13 · cyberstrikeus

    Do not run applications as privileged (Automated)
    0 installs
25. ▌
    Cis Tomcat101 10 14 · cyberstrikeus

    Do not allow cross context requests (Automated)
    0 installs
26. ▌
    Cis Tomcat101 10 15 · cyberstrikeus

    Do not resolve hosts on logging valves (Automated)
    0 installs
27. ▌
    Cis Tomcat101 10 16 · cyberstrikeus

    Enable memory leak listener (Automated)
    0 installs
28. ▌
    Cis Tomcat101 10 17 · cyberstrikeus

    Setting Security Lifecycle Listener (Automated)
    0 installs
29. ▌
    Cis Tomcat101 10 18 · cyberstrikeus

    Use the logEffectiveWebXml and metadata-complete settings for deploying applications in production (Automated)
    0 installs
30. ▌
    Cis Tomcat101 10 19 · cyberstrikeus

    Ensure Manager Application Passwords are Encrypted (Manual)
    0 installs
31. ▌
    Cis Tomcat7 V100 10 10 · cyberstrikeus

    Configure connectionTimeout
    0 installs
32. ▌
    Cis Tomcat7 V100 10 11 · cyberstrikeus

    Configure maxHttpHeaderSize
    0 installs
33. ▌
    Cis Tomcat7 V100 10 12 · cyberstrikeus

    Force SSL for all applications
    0 installs
34. ▌
    Cis Tomcat7 V100 10 13 · cyberstrikeus

    Increase the entropy in session identifiers
    0 installs
35. ▌
    Cis Tomcat7 V100 10 14 · cyberstrikeus

    Do not allow symbolic linking
    0 installs
36. ▌
    Cis Tomcat7 V100 10 15 · cyberstrikeus

    Do not run applications as privileged
    0 installs
37. ▌
    Cis Tomcat7 V100 10 16 · cyberstrikeus

    Do not allow cross context requests
    0 installs
38. ▌
    Cis Tomcat7 V100 10 17 · cyberstrikeus

    Do not resolve hosts on logging valves
    0 installs
39. ▌
    Cis Tomcat7 V100 10 18 · cyberstrikeus

    Enable memory leak listener
    0 installs
40. ▌
    Cis Tomcat7 V100 10 19 · cyberstrikeus

    Setting Security Lifecycle Listener
    0 installs
41. ▌
    Cis Tomcat7 V100 10 20 · cyberstrikeus

    use the logEffectiveWebXml and metadata-complete settings for deploying applications in production
    0 installs
42. ▌
    Cis Tomcat7 V110 10 10 · cyberstrikeus

    Configure connectionTimeout
    0 installs
43. ▌
    Cis Tomcat7 V110 10 11 · cyberstrikeus

    Configure maxHttpHeaderSize
    0 installs
44. ▌
    Cis Tomcat7 V110 10 12 · cyberstrikeus

    Force SSL for all applications
    0 installs
45. ▌
    Cis Tomcat7 V110 10 13 · cyberstrikeus

    Do not allow symbolic linking
    0 installs
46. ▌
    Cis Tomcat7 V110 10 14 · cyberstrikeus

    Do not run applications as privileged
    0 installs
47. ▌
    Cis Tomcat7 V110 10 15 · cyberstrikeus

    Do not allow cross context requests
    0 installs
48. ▌
    Cis Tomcat7 V110 4 5 · cyberstrikeus

    Restrict access to Tomcat temp directory
    0 installs
49. ▌
    Cis Tomcat7 V110 4 6 · cyberstrikeus

    Restrict access to Tomcat binaries directory
    0 installs
50. ▌
    Cis Tomcat7 V110 4 7 · cyberstrikeus

    Restrict access to Tomcat web application directory
    0 installs
51. ▌
    Cis Tomcat7 V110 4 8 · cyberstrikeus

    Restrict access to Tomcat catalina.policy
    0 installs
52. ▌
    Cis Tomcat7 V110 4 9 · cyberstrikeus

    Restrict access to Tomcat catalina.properties
    0 installs
53. ▌
    Cis Tomcat7 V110 5 1 · cyberstrikeus

    Use secure Realms
    0 installs
54. ▌
    Cis Tomcat7 V110 5 2 · cyberstrikeus

    Use LockOut Realms
    0 installs
55. ▌
    Cis Tomcat7 V110 6 1 · cyberstrikeus

    Setup Client-cert Authentication
    0 installs
56. ▌
    Cis Tomcat7 V110 6 2 · cyberstrikeus

    Ensure SSLEnabled is set to True for Sensitive Connectors
    0 installs
57. ▌
    Cis Tomcat7 V110 6 3 · cyberstrikeus

    Ensure scheme is set accurately
    0 installs
58. ▌
    Cis Tomcat7 V110 6 4 · cyberstrikeus

    Ensure secure is set to true only for SSL-enabled Connectors
    0 installs
59. ▌
    Cis Tomcat7 V110 6 5 · cyberstrikeus

    Ensure SSL Protocol is set to TLS for Secure Connectors
    0 installs
60. ▌
    Cis Tomcat7 V110 7 1 · cyberstrikeus

    Application specific logging
    0 installs
61. ▌
    Cis Tomcat7 V110 7 2 · cyberstrikeus

    Specify file handler in logging.properties files
    0 installs
62. ▌
    Cis Tomcat7 V110 7 3 · cyberstrikeus

    Ensure className is set correctly in context.xml
    0 installs
63. ▌
    Cis Tomcat7 V110 7 4 · cyberstrikeus

    Ensure directory in context.xml is a secure location
    0 installs
64. ▌
    Cis Tomcat7 V110 7 5 · cyberstrikeus

    Ensure pattern in context.xml is correct
    0 installs
65. ▌
    Cis Tomcat7 V110 7 6 · cyberstrikeus

    Ensure directory in logging.properties is a secure location
    0 installs
66. ▌
    Cis Tomcat7 V110 7 7 · cyberstrikeus

    Configure log file size limit
    0 installs
67. ▌
    Cis Tomcat7 V110 8 1 · cyberstrikeus

    Restrict runtime access to sensitive packages
    0 installs
68. ▌
    Cis Tomcat7 V110 9 1 · cyberstrikeus

    Starting Tomcat with Security Manager
    0 installs
69. ▌
    Cis Tomcat7 V110 9 2 · cyberstrikeus

    Disabling auto deployment of applications
    0 installs
70. ▌
    Cis Tomcat7 V110 9 3 · cyberstrikeus

    Disable deploy on startup of applications
    0 installs
71. ▌
    Cis Tomcat8 V100 1 1 · cyberstrikeus

    Remove extraneous files and directories
    0 installs
72. ▌
    Cis Tomcat8 V100 1 2 · cyberstrikeus

    Disable Unused Connectors
    0 installs
73. ▌
    Cis Tomcat8 V100 2 1 · cyberstrikeus

    Alter the Advertised server.info String
    0 installs
74. ▌
    Cis Tomcat8 V100 2 2 · cyberstrikeus

    Alter the Advertised server.number String
    0 installs
75. ▌
    Cis Tomcat8 V100 2 3 · cyberstrikeus

    Alter the Advertised server.built Date
    0 installs
76. ▌
    Cis Tomcat8 V100 2 4 · cyberstrikeus

    Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors
    0 installs
77. ▌
    Cis Tomcat8 V100 2 5 · cyberstrikeus

    Disable client facing Stack Traces
    0 installs
78. ▌
    Cis Tomcat8 V100 2 6 · cyberstrikeus

    Turn off TRACE
    0 installs
79. ▌
    Cis Tomcat8 V100 3 1 · cyberstrikeus

    Set a nondeterministic Shutdown command value
    0 installs
80. ▌
    Cis Tomcat8 V100 3 2 · cyberstrikeus

    Disable the Shutdown port
    0 installs
81. ▌
    Cis Tomcat8 V100 7 7 · cyberstrikeus

    Configure log file size limit (Scored)
    0 installs
82. ▌
    Cis Tomcat8 V100 9 3 · cyberstrikeus

    Disable deploy on startup of applications (Scored)
    0 installs
83. ▌
    Cis Tomcat8 V110 1 1 · cyberstrikeus

    Remove extraneous files and directories (Scored)
    0 installs
84. ▌
    Cis Tomcat8 V110 1 2 · cyberstrikeus

    Disable Unused Connectors (Not Scored)
    0 installs
85. ▌
    Cis Tomcat8 V110 2 1 · cyberstrikeus

    Alter the Advertised server.info String (Scored)
    0 installs
86. ▌
    Cis Tomcat8 V110 2 2 · cyberstrikeus

    Alter the Advertised server.number String (Scored)
    0 installs
87. ▌
    Cis Tomcat8 V110 2 3 · cyberstrikeus

    Alter the Advertised server.built Date (Scored)
    0 installs
88. ▌
    Cis Tomcat8 V110 2 4 · cyberstrikeus

    Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors (Scored)
    0 installs
89. ▌
    Cis Tomcat8 V110 2 5 · cyberstrikeus

    Disable client facing Stack Traces (Scored)
    0 installs
90. ▌
    Cis Tomcat8 V110 2 6 · cyberstrikeus

    Turn off TRACE (Scored)
    0 installs
91. ▌
    Cis Tomcat8 V110 2 7 · cyberstrikeus

    Ensure Sever Header is Modified To Prevent Information Disclosure (Not Scored)
    0 installs
92. ▌
    Cis Tomcat8 V110 3 1 · cyberstrikeus

    Set a nondeterministic Shutdown command value (Scored)
    0 installs
93. ▌
    Cis Tomcat8 V110 3 2 · cyberstrikeus

    Disable the Shutdown port (Not Scored)
    0 installs
94. ▌
    Cis Tomcat8 V110 4 1 · cyberstrikeus

    Restrict access to $CATALINA_HOME (Scored)
    0 installs
95. ▌
    Cis Tomcat8 V110 4 2 · cyberstrikeus

    Restrict access to $CATALINA_BASE (Scored)
    0 installs
96. ▌
    Cis Tomcat8 V110 4 3 · cyberstrikeus

    Restrict access to Tomcat configuration directory (Scored)
    0 installs
97. ▌
    Cis Tomcat8 V110 4 4 · cyberstrikeus

    Restrict access to Tomcat logs directory (Scored)
    0 installs
98. ▌
    Cis Tomcat8 V110 4 5 · cyberstrikeus

    Restrict access to Tomcat temp directory (Scored)
    0 installs
99. ▌
    Cis Tomcat8 V110 4 6 · cyberstrikeus

    Restrict access to Tomcat binaries directory (Scored)
    0 installs
100. ▌
     Cis Tomcat8 V110 4 7 · cyberstrikeus

     Restrict access to Tomcat web application directory (Scored)
     0 installs