Joomla!-Sicher machen. Brian Klug -

Transkript

1 Joomla!-Sicher machen Brian Klug -

2 Über mich Christian Schmidt 31 Jahre Joomla! User Group München-Gründer Joomla-Security.de-Gründer

3 Themen Benutzer und Passwörter Zwei-Faktor Authentifizierung Backups und Updates Angriffe abwehren Preisgeben von Informationen verhindern Joomla! wurde gehackt! Was muss ich tun? SSL und Joomla Offene Fragen und Antwortrunde

4 Benutzer und Passwörter Benutzer: admin Passwort: Superadmin1234 marc falardeau -

5 Benutzer und Passwörter Benutzer: 5uper6oTT-Adm1n=? Passwort: Nkmwu?U,gdtMw{a7k=K"=q7hc85 marc falardeau -

6 YubiKey Zwei-Faktor-Authentifizierung Tom -

7 Backup Backups regelmäßig anlegen und Extern aufbewahren Jaymis Loveday -

8 Updates Updates zeitnahe einspielen

9 Sichere Joomla!-Einstellungen Administration Htaccess- Passwortschutz Benutzerregistrierung Deaktivieren Unnötige Einstellungen Deaktivieren Nicht verwendete Erweiterungen Deaktivieren oder Deinstallieren

10 [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/noxdir [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/pma2005 [Thu Angriffe Aug 0502:29: ] [error] abwehren [client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/admin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/admin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/admin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/admin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/db [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/dbadmin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/myadmin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/mysql-admin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/mysql [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/mysqladmin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/mysqlmanager [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/p [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmy [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/php-my-admin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/php-myadmin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmi [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error] Haupt [client ].htaccess File doesdatei not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin anpassen [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error] Robots.txt [client ] anpassen File does not exist: (Security /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin by Obsurity) [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error] WAF [client ] (WebApplicationFirewall) File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin VOR der Seite [Thu Aug 0502:29: ] [error][client ] does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error] Guter [client ] HosterFile does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:29: ] [error] Alle [client vorangegangen ] File does not exist: Themen /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin erfüllt [Thu Aug 0502:29: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error] usw. [client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin [Thu Aug 0502:30: ] [error][client ] File does not exist: /var/www/vhosts/domain-name.de/httpdocs/phpmyadmin-2.5.3

11 Preisgeben von Informationen verhindern Generator Tag Fußzeilen Information Fehler Seiten (Server)

12 Joomla! wurde gehackt! Was muss ich tun? -> -> -> Mickie Quick -

13 SSL & Joomla! Für einzelne Unterseiten oder die komplette Seite Christiaan Colen-

14 Bettina Braun -

15 Dennis Skley-

16