Kategori: Remediation Guides
mDNS Detection (Remote Network): How to Block UDP 5353 and Fix Nessus 12218
mDNS Detection (Remote Network) is a Nessus finding (plugin 12218) raised when a host answers multicast DNS queries on UDP 5353 from…
How to Disable LLMNR and NetBIOS over TCP/IP on Windows
LLMNR (UDP 5355) and NetBIOS over TCP/IP (UDP 137) are fallback name resolution protocols Windows uses when DNS fails, and an attacker…
How to Disable the Kubelet Read-Only Port 10255 (kube-bench 4.2.4, Trivy KCV-0082)
The kubelet read-only port 10255 is a plain HTTP endpoint that serves pod specs, node stats and metrics without authentication or authorization.…
How to Disable Kerberos DES Encryption on AD Accounts
Use Kerberos DES encryption types for this account is a legacy Active Directory option (userAccountControl flag USE_DES_KEY_ONLY, 0x200000) that restricts an account…
JavaScript Source Map Detected: How to Disable Source Maps in Production
A “JavaScript Source Map Detected” finding means your web server publicly serves .js.map files that let anyone rebuild your original, unminified front-end…
IP Forwarding Enabled: How to Disable It on Linux and Windows (Nessus 50686 and CIS)
IP Forwarding Enabled (Nessus plugin 50686, and the CIS benchmark check “Ensure IP forwarding is disabled”) means the host will pass packets…
Internet Explorer Unsupported Version Detection (Nessus 22024): How to Disable IE11 and Close the Finding
Microsoft Internet Explorer Unsupported Version Detection is Tenable Nessus plugin 22024, which reports Windows hosts where Internet Explorer is present in a…
How to Fix IKE Aggressive Mode with Pre-Shared Key (Nessus 62694)
IKE Aggressive Mode with Pre-Shared Key means a VPN gateway accepts IKEv1 Aggressive Mode handshakes authenticated with a pre-shared key (PSK). In…
Ensure ICMP Redirects Are Not Accepted: How to Fix the CIS Linux Finding
Ensure ICMP redirects are not accepted is a CIS benchmark check that fails when the Linux kernel accepts ICMP redirects that can…
HTTP TRACE / TRACK Methods Allowed: How to Disable Them on Apache, IIS, nginx and Tomcat
HTTP TRACE / TRACK Methods Allowed means your web server answers TRACE (or Microsoft’s TRACK) requests by echoing the full request back,…