Networking

HAProxy

HAProxy is an open source load balancer and reverse proxy for TCP and HTTP traffic. Many appliances use it as their front end, so a changed HAProxy rule can quietly route traffic to an attacker's tool.

Deep dive

Learn Article

How to Audit Remote Support Logs for Role Escalation

How to audit remote support logs after a compromise: off-appliance sources, role changes, admin logins, odd request paths, log gaps and file transfers.

intermediate 5 min read

Back to glossary