Haris Nadeem https://harisnadeem.com Community Builder & Technologist Tue, 30 Aug 2022 12:40:46 +0000 en-US hourly 1 https://wordpress.org/?v=6.1.1 https://harisnadeem.com/wp-content/uploads/2019/12/cropped-dp76_square_website-e1576066185742-120x120.jpg Haris Nadeem https://harisnadeem.com 32 32 15478304 21 Security Search Engines https://harisnadeem.com/2022/08/30/21-security-search-engines/ Mon, 29 Aug 2022 19:00:25 +0000 https://harisnadeem.com/?p=817 The following is a list of the top 21 cybersecurity search engines shared by Basit Alvi on Twitter. This list will be particularly helpful for security researchers (aka ‘hackers’) looking to find deeper information not easily available on Internet search engines like Google, Bing etc. Shodan Search for devices connected to the Internet. Wigle Database […]

<p>The post 21 Security Search Engines first appeared on Haris Nadeem.</p>

]]> The following is a list of the top 21 cybersecurity search engines shared by Basit Alvi on Twitter. This list will be particularly helpful for security researchers (aka ‘hackers’) looking to find deeper information not easily available on Internet search engines like Google, Bing etc.

Shodan

Search for devices connected to the Internet.

Wigle

Database of wireless networks, with statistics.

Grep App

Search across a half million git repos.

Binary Edge

Scans the Internet for threat intelligence.

ONYPHE

Collections cyber-threat intelligence data.

GreyNoise

Search for devices connected to the Internet – just like Shodan.

Censys

Assessing attach surface for Internet connected devices.

Hunter

Search for email addresses belonging to a website.

Fofa

Search for various threat intelligence.

ZoomEye

Gather information about targets.

LeakIX

Search publicly indexed information.

IntelligenceX

Search Tor, I2P, data leaks, domains and emails

Netlas

Search and monitor Internet connect assets.

URL Scan

Free service to scan and analyze websites.

PublicWWW

Marketing and affiliate marketing research.

FullHunt

Search and discovery attack surfaces.

CRT sh

Search for certs that have been logged by CT.

Vulners

Search vulnerabilities in a large database.

Pulsedive

Search for threat intelligence.

Packet Storm Security

Browse latest vulnerabilities and exploits.

GrayHatWarefare

Search public S3 buckets.

Tweet credits: Basit Alvi

<p>The post 21 Security Search Engines first appeared on Haris Nadeem.</p>

]]> 817 My WordPress Stack https://harisnadeem.com/2022/08/29/my-wordpress-stack/ Mon, 29 Aug 2022 13:17:31 +0000 https://harisnadeem.com/?p=740 This will serve as a checklist for myself and for anyone who wants to set up and install a brand new WordPress site. The following list of tools, plugins and services make sure your website is super fast and completely kills it through every speed test score out there. The plan was to put out […]

<p>The post My WordPress Stack first appeared on Haris Nadeem.</p>

]]> This will serve as a checklist for myself and for anyone who wants to set up and install a brand new WordPress site. The following list of tools, plugins and services make sure your website is super fast and completely kills it through every speed test score out there.

The plan was to put out a similar list on a public Notion document, but why waste a completely good blog that I always wanted to get active on.

So let’s get started…

To start off, you need to have active subscriptions and accounts on the following services:

  • DigitalOcean, AWS Lightsail, Vultr etc.
  • Cloudflare for domain, DNS and SSL
  • RunCloud for complete cloud server management

1. DigitalOcean

  • Create a new Droplet on DigitalOcean
  • Pick region NYC1
  • Install Ubuntu 20.04 (LTS) x64

2. Cloudflare

  • Add domain to Cloudflare
  • Set SSL to ‘Flexible’
  • Configure DNS
    • Add an ‘A’ record pointing to server IP
    • Add ‘CNAME’ record as ‘www’ for content: domain.com

3. RunCloud

  • Connect server to RunCloud and install agent

Create Web Application

  • Add a new WordPress web application
  • Fill out details: domain, WordPress and MySQL information
  • Once created, login into WP Dashboard to make sure everything is working

SSL

  • Deploy “Let’s Encrypt” SSL to the server
  • Configure redirection to HSTS
  • WP Dashboard should stop working until the next step is completed
    • Page should be stuck in redirection loop

4. Cloudflare, again

  • Set SSL to “Full (strict)”
    • Everything should be working fine now with full SSL enabled

5. WordPress

This is where the main work starts…

Basic Settings

  • Add a tagline
  • Change timezone

Install Plugins

  • Jetpack
  • Health Check & Troubleshooting
  • Akismet Anti-Spam
  • WP Mail SMTP
  • Rank Math SEO
  • WPForms / Ninja Forms
  • UpdraftPlus
  • WP Rocket
  • Autoptimize / Perfmatters
  • Cloudflare
  • Sucuri

Install Theme

  • Pick one of these themes for best performance: Blocksy, GeneratePress, Neve

<p>The post My WordPress Stack first appeared on Haris Nadeem.</p>

]]> 740