隐藏Apache版本号及版本敏感信息

在安装软件前,咱们须要隐藏软件的版本号及版本其余信息,这样就大大提升了安全指数。html

只隐藏版本号:apache

咱们在主配置文件里:httpd.confvim

[root@bqh-119 ~]# curl -i bbs.bqh123.com
HTTP/1.1 200 OK
Date: Tue, 16 Jul 2019 14:45:30 GMT
Server: Apache/2.2.27 (Unix) DAV/2    #不隐藏的状况下,显示版本号及版本信息
Last-Modified: Sun, 14 Jul 2019 11:06:54 GMT
ETag: "dff71-16-58da224263365"
Accept-Ranges: bytes
Content-Length: 22
Content-Type: text/html

http://bbs.bqh123.com
[root@bqh-119 ~]# echo -e "ServerTokens Prod\nServerSignature Off" >>/application/apache/conf/httpd.conf
[root@bqh-119 ~]# tail -2 /application/apache/conf/httpd.conf
ServerTokens Prod
ServerSignature Off
[root@bqh-119 ~]# /application/apache/bin/apachectl -t
Syntax OK
[root@bqh-119 ~]# /application/apache/bin/apachectl graceful
[root@bqh-119 ~]# curl -i bbs.bqh123.com
HTTP/1.1 200 OK
Date: Tue, 16 Jul 2019 15:19:04 GMT
Server: Apache                                 #版本号木有了
Last-Modified: Sun, 14 Jul 2019 11:06:54 GMT
ETag: "dff71-16-58da224263365"
Accept-Ranges: bytes
Content-Length: 22
Content-Type: text/html

http://bbs.bqh123.com

隐藏系统及版本信息:安全

编辑源文件中:app

  • vim apache2.2.27/include/ap_release.h
  • vim httpd-2.2.27/os/unix/os.h

能够把里面的信息改为你想要的系统或版本curl

注:是在编译软件以前的操做!!!url

相关文章
相关标签/搜索