Autonomía digital y tecnológica

Código e ideas para una internet distribuida

Linkoteca. seguridad web


Websites constantly receive automated traffic from various bots and AI agents — some of it useful, some harmful. Search engine crawlers help readers find your content and improve your various rankings. Malicious bots can evaluate your website’s vulnerabilities, attempting login attacks, overloading server resources and mimic real users in ways that are difficult to detect. A growing proportion of automated traffic is now scraping your website’s content in order to train some large language model (AI).

Baskerville is a WordPress plugin designed to help you monitor, classify, and control automated traffic. It runs in the background giving you the visibility and tools to manage how bots and suspicious visitors interact with your site.

changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It’s default mode is to scan HTTP default credentials, but has support for other credentials.

changeme is designed to be simple to add new credentials without having to write any code or modules. changeme keeps credential data separate from code. All credentials are stored in yaml files so they can be both easily read by humans and processed by changeme. Credential files can be created by using the ./changeme.py --mkcred tool and answering a few questions.

The second step is to start creating the Certificate File. For that you can use the «openssl» command that will assist you in the process. The command is as follows

mkdir -p /etc/ssl/localcerts
openssl req -new -x509 -days 365 -nodes -out /etc/ssl/localcerts/apache.pem -keyout /etc/ssl/localcerts/apache.key
chmod 600 /etc/ssl/localcerts/apache*