Is it possible to hack a website with pure Apache HTML?
Let's assume you are running a pure-HTML website on Apache. Just listening to static files, nothing dynamic, nothing fancy.
Let's also assume that all passwords are safe and social hacks (e.g. phishing attacks, etc.)
Can a site of this nature be hacked? Can the server get compromised? Are there any examples for this?
a source to share
You may be interested to read the article article or two about " Protecting Apache 2 " .
It's safe to say it's safe, but you might notice that Apache does come with some modules already included.
In addition, the goal of Apache security should not only be to protect the server instance itself, but also to isolate the server so that you can limit the damage that such an intrusion can cause . P>
All this information, of course, depends on the web server being the only open component in the field.
a source to share
Yes, such a server can become compromised. Unfortunately, a very common vector is an FTP connection to a server over an insecure Wi-Fi connection. Anyone who listens carefully can pick your password off the air. (It's nice to be in a tech conference and display your password on the screen so everyone can see alongside other fools who have sent their credentials to the clear Wi-Fi interface.)
Another common vector is a simple password and it gets caught in a dictionary attack.
a source to share
I am sure this could be compromised due to security flaws in Apache. While it is true that adding more layers (like php, sql, etc.) to the server itself increases the likelihood of vulnerability, nothing is infallible.
Apache, however, is a very famous open source program, and the community is great at dealing with such bugs.
Short answer: any device connected to the Internet can be "jailbroken"
a source to share