Jump to Content

Articles tagged with Apache

YaBB Malformed Headers with Apache ServerTokens

I recently discovered a bug in YaBB whilst locking down a customers server. YaBB has fairly crude regex matches for /^IIS/ coded into it, they are there so that the scripts don't output malformed headers on Windows systems. Generally as a rule (Whe...

Hiding daemon version numbers

An easy way to make yourself a little less vulnerable to common attack vendors, is to hide the version numbers of the common daemons running on your boxes, and its relativly simple to do. Hiding the BIND Version If you follow my Closing Open D...

Basic Linux Lockdown

This is a very basic list of procedures commonly used to lock down a linux web server, it is incomplete and very brief, when I have enough time I will lay it all out properly and add the missing pieces, hopefully though its of some use to you. ...
Back to top