| Author |
|
mohamedilyas
Joined: 03 Apr 2024
Posts: 10
Location: India
|
 Posted: Wed 03 Apr '24 10:50 Post subject: Header response in Apache need to removed |
 |
|
Hi All,
I am working VAPT closure where i need to remove the Apcahe response header which shows apache server name in browser.
Kindly help me with any docs .
Apache version ;Apache/2.4.52 (Unix)
installed as a tar package. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7374
Location: Germany, Next to Hamburg
|
|
| Back to top |
|
mohamedilyas
Joined: 03 Apr 2024
Posts: 10
Location: India
|
| Posted: Wed 03 Apr '24 11:53 Post subject: |
|
|
I have tried both below parameters but i need to remove the Server : Apache to customized value which i am failed to do please help on this.
ServerTokens PROD
ServerSignature Off
Expected Response:
Server sends (e.g.): Server: webserver |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7374
Location: Germany, Next to Hamburg
|
| Posted: Wed 03 Apr '24 11:57 Post subject: |
|
|
With tokens Prod, you can have only "Server: Apache". If you want to have a different result use mod_bikeshed[1]
[1] https://github.com/JBlond/mod_bikeshed |
|
| Back to top |
|
mohamedilyas
Joined: 03 Apr 2024
Posts: 10
Location: India
|
| Posted: Thu 04 Apr '24 11:34 Post subject: |
|
|
Thanks for the Links its absolutely cleared my requirement.
Thinking ? It is safe to implement on production banking servers. just asked because this method should not open any other VA Points. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7374
Location: Germany, Next to Hamburg
|
| Posted: Thu 04 Apr '24 14:04 Post subject: |
|
|
| mohamedilyas wrote: |
Thinking? It is safe to implement on production banking servers. just asked because this method should not open any other VA Points. |
With that pretending to be an "unknown" server software I passed PCI DSS and HIPAA tests. The only hard thing might be to compile SSL with FIPS mode. |
|
| Back to top |
|
mohamedilyas
Joined: 03 Apr 2024
Posts: 10
Location: India
|
| Posted: Sat 06 Apr '24 10:59 Post subject: |
|
|
| thanks a lot for the quick reply. |
|
| Back to top |
|
