隐藏Apache的版本号及其它敏感信息 - 博客频道 - CSDN.NET
小小滴人儿呀~~穷开心~
首先，打开配置文件: /etc/apache2/apache2.conf 来修改ServerTokens 的配置:
找到:ServerTokens Full 所在行,将其改为:
ServerTokens Prod
没有就添加上面这一行即可
然后重新加紧载Apache的配置:& /etc/init.d/apache2 restart
这时，Apache的版本信息被隐藏了。
再编辑配置文件 security.conf
vim /etc/apache2/conf-available/security.conf
找到：ServerSignature On
修改成：ServerSignature Off
然后从启Apache
大功告成！
效果如下图：
排名：千里之外apache中隐藏php的版本（ X-Powered-By）的方法与thinkphp框架中修改demo
apache中隐藏php的版本（ X-Powered-By）的方法与thinkphp框架中修改demo
网站出错时，在文件头会显示PHP的版本，为了安全起见，我们可以关闭这个PHP版本的信息（X-Powered-By）。
方法很简单：
在windows环境只是需要修改php.ini 的expose_php把默认的On改成Off就行了。
打开php.ini,
查找到expose_php = Off (改为Off即可)
或者在Linux修改主配置文件 httpd.conf
找到:ServerTokens Full 所在行,将其改为:
ServerTokens Prod
没有就添加上面这一行.即可.
修改后如下：
ServerSignature Off
ServerTokens Prod
然后重启apache就可以了。
ThinkPHP框架如何修改X-Powered-By
用ThinkPHP框架开发了的网站，里面有一项：
X-Powered-By: ThinkPHP 2.0
这样虽然没什么，但感觉如果别有用心的人查询会知道你是用这个框架开发的，有可能针对该框架的漏洞进行相关活动。
如果要修改这个X-Powered-By，怎么办呢？
其实很简单，我们打开视图类文件：
ThinkPHP/Lib/Think/Core/View.class.php
找到这个方法fetch()
可以看到：
header("X-Powered-By:ThinkPHP".THINK_VERSION);
将这行删除掉，或者修改成你自己的&& &
您可能还会对这些文章感兴趣！lvnian2009 的BLOG
用户名：lvnian2009
文章数：243
评论数：125
访问量：42767
注册日期：
阅读量：5863
阅读量：12276
阅读量：412506
阅读量：1100448
51CTO推荐博文
隐藏apache版本信息######################################33隐藏Apache信息[root@LAMP ~]# curl -I 127.0.0.1 & & & & &HTTP/1.1 200 OKDate: Thu, 24 Sep :29 GMTServer: Apache/2.2.27 (Unix) DAV/2 PHP/5.3.27X-Powered-By: PHP/5.3.27Content-Type: text/html##由此可见版本号为2.2.27[root@LAMP ~]#&1 主配置中启用httpd-default.conf# vi /application/apache/conf/httpd.Conf//找到httpd-default.conf，删除includes前面的“#”，改成如下Include conf/extra/httpd-default.conf或者用sed命令cd /application/apache/conf/grep "Include conf/extra/httpd-default.conf" httpd.confsed -i 's$#Include conf/extra/httpd-default.conf$Include conf/extra/httpd-default.conf$g' httpd.confgrep "Include conf/extra/httpd-default.conf" httpd.conf修改httpd-default.conf文件：/application/apache/conf/extra/httpd-default.conf找到ServerTokens FullServerSignature On改成ServerTokens ProdServerSignature off########或者用sed命令cd /application/apache/conf/extra/egrep "ServerTokens Full|ServerSignature On" httpd-default.conf&sed -i 's/ServerTokens Full/ServerTokens Prod/g' httpd-default.conf&sed -i 's/ServerSignature On/ServerSignature off/g' httpd-default.conf&egrep "ServerTokens |ServerSignature " httpd-default.conf#########sed过程[root@LAMP conf]# cd /application/apache/conf/extra/[root@LAMP extra]# egrep "ServerTokens Full|ServerSignature On" httpd-default.conf&ServerTokens FullServerSignature On[root@LAMP extra]# sed -i 's/ServerTokens Full/ServerTokens Prod/g' httpd-default.conf&[root@LAMP extra]# sed -i 's/ServerSignature On/ServerSignature off/g' httpd-default.conf & & & & & & & & & & &&[root@LAMP extra]# egrep "ServerTokens |ServerSignature " httpd-default.conf&####################重启apache，查看是否修改了版本号&curl -I 10.0.0.3&/application/apache/bin/apachectl graceful&curl -I 10.0.0.3&[root@LAMP extra]# /application/apache/bin/apachectl graceful[root@LAMP extra]# curl -I 10.0.0.3 & & & & &&HTTP/1.1 200 OKDate: Thu, 24 Sep :18 GMTServer: ApacheX-Powered-By: PHP/5.3.27Content-Type: text/html##由此可见版本号2.2.27不见了。但是版本apache还在[root@LAMP extra]#&上面的方法只能修改版本号，不能改变版本，如果需要改变版本，是默认情况下安装的Apache，如果是编译安装的，还可以用修改源码编译的方法：修改下面两个文件的内容：/home/lvnian/tools/httpd-2.2.27/include/ap_release.h/home/lvnian/tools/httpd-2.2.27/os/unix/os.hcp /home/lvnian/tools/httpd-2.2.27/include/ap_release.h /home/lvnian/tools/httpd-2.2.27/include/ap_release.h.oricp /home/lvnian/tools/httpd-2.2.27/os/unix/os.h /home/lvnian/tools/httpd-2.2.27/os/unix/os.h.ori修改内容如下：#####################&40 #define AP_SERVER_BASEVENDOR "Apache Software Foundation"&41 #define AP_SERVER_BASEPROJECT "Apache HTTP Server"&42 #define AP_SERVER_BASEPRODUCT "Apache"&43&&44 #define AP_SERVER_MAJORVERSION_NUMBER 2&45 #define AP_SERVER_MINORVERSION_NUMBER 2&46 #define AP_SERVER_PATCHLEVEL_NUMBER & 27&47 #define AP_SERVER_DEVBUILD_BOOLEAN & &0&修改成下面内容&40 #define AP_SERVER_BASEVENDOR "lvnian IIS6 Software Foundation"&41 #define AP_SERVER_BASEPROJECT "lvnian IIS6 &HTTP Server"&42 #define AP_SERVER_BASEPRODUCT "lvnian IIS6 "&43&&44 #define AP_SERVER_MAJORVERSION_NUMBER 1&45 #define AP_SERVER_MINORVERSION_NUMBER 3&46 #define AP_SERVER_PATCHLEVEL_NUMBER & 5&47 #define AP_SERVER_DEVBUILD_BOOLEAN & &7&&&###########################3&用sed 修改如下：&grep -n '"Apache' /home/lvnian/tools/httpd-2.2.27/include/ap_release.hcd /home/lvnian/tools/httpd-2.2.27/include/sed -i 's/"Apache/"lvnian IIS6/g' ap_release.hsed -n '40,42p' ap_release.h&sed -n '44,47p' ap_release.hgrep "AP_SERVER_MAJORVERSION_NUMBER 2" ap_release.hsed -i 's/AP_SERVER_MAJORVERSION_NUMBER 2/AP_SERVER_MAJORVERSION_NUMBER 1/g' ap_release.hsed -i 's/AP_SERVER_MINORVERSION_NUMBER 2/AP_SERVER_MINORVERSION_NUMBER 3/g' ap_release.hsed -i 's/AP_SERVER_PATCHLEVEL_NUMBER & 27/AP_SERVER_PATCHLEVEL_NUMBER & 5/g' ap_release.hsed -i 's/AP_SERVER_DEVBUILD_BOOLEAN & &0/AP_SERVER_DEVBUILD_BOOLEAN & &7/g' ap_release.hsed -n '44,47p' ap_release.hsed -n '39,47p' ap_release.h############sed 命令过程&[root@LAMP ~]# grep -n '"Apache' /home/lvnian/tools/httpd-2.2.27/include/ap_release.h38: * Example: "Apache/1.1.0 MrWidget/0.1-alpha"40:#define AP_SERVER_BASEVENDOR "Apache Software Foundation"41:#define AP_SERVER_BASEPROJECT "Apache HTTP Server"42:#define AP_SERVER_BASEPRODUCT "Apache"[root@LAMP ~]# cd /home/lvnian/tools/httpd-2.2.27/include/ & & & & & &[root@LAMP include]# sed -i 's/"Apache/"lvnian IIS6/g' ap_release.h & & & & & & & & & & & & & & & & & & & & &[root@LAMP include]# sed -n '40,42p' ap_release.h#define AP_SERVER_BASEVENDOR "lvnian IIS6 Software Foundation"#define AP_SERVER_BASEPROJECT "lvnian IIS6 HTTP Server"#define AP_SERVER_BASEPRODUCT "lvnian IIS6"&[root@LAMP include]# sed -n '44,47p' ap_release.h & &&#define AP_SERVER_MAJORVERSION_NUMBER 2#define AP_SERVER_MINORVERSION_NUMBER 2#define AP_SERVER_PATCHLEVEL_NUMBER & 27#define AP_SERVER_DEVBUILD_BOOLEAN & &0[root@LAMP include]# grep "AP_SERVER_MAJORVERSION_NUMBER 2" ap_release.h#define AP_SERVER_MAJORVERSION_NUMBER 2[root@LAMP include]# sed -i 's/AP_SERVER_MAJORVERSION_NUMBER 2/AP_SERVER_MAJORVERSION_NUMBER 1/g' ap_release.h[root@LAMP include]# sed -i 's/AP_SERVER_PATCHLEVEL_NUMBER & 27/AP_SERVER_PATCHLEVEL_NUMBER & 5/g' ap_release.h[root@LAMP include]# sed -i 's/AP_SERVER_DEVBUILD_BOOLEAN & &0/AP_SERVER_DEVBUILD_BOOLEAN & &7/g' ap_release.h[root@LAMP include]# sed -n '44,47p' ap_release.h & & & & & & & & & & & & & & & & & & & & & & & &#define AP_SERVER_MAJORVERSION_NUMBER 1#define AP_SERVER_MINORVERSION_NUMBER 3#define AP_SERVER_PATCHLEVEL_NUMBER & 5#define AP_SERVER_DEVBUILD_BOOLEAN & &7#############################################################################3修改 /home/lvnian/tools/httpd-2.2.27/os/unix/os.h文件的下面内容 ，修改成你想要修改的内容& 35 #define PLATFORM "Unix"&如修改成#define PLATFORM "win32"sed命令如下cd /home/lvnian/tools/httpd-2.2.27/os/unix/sed -n '/#define PLATFORM /p' os.hsed -i 's/#define PLATFORM "Unix"/#define PLATFORM "LVNIAN WIN"/g' os.hsed -n '/#define PLATFORM /p' os.h##########[root@LAMP unix]# sed -n '/#define PLATFORM /p' os.h#define PLATFORM "Unix"[root@LAMP unix]# sed -i 's/#define PLATFORM "Unix"/#define PLATFORM "LVNIAN WIN"/g' os.h & & & & & & & & & &[root@LAMP unix]# sed -n '/#define PLATFORM /p' os.h & & & & & & & & & & & & & & & & & &&#define PLATFORM "LVNIAN WIN"[root@LAMP unix]#&记得要上面的都不需要把#注销去掉备份配置文件，重新编译安装&pkill httpdrm -rf /application/apache2.22.27cd /home/lvnian/toolscd httpd-2.2.27./configure \--prefix=/application/apache2.22.27 \--enable-deflate \--enable-expires \--enable-headers \--enable-modules=most \--enable-so \--with-mpm=worker \--enable-rewritemake && make install##解决启动apache慢问题grep -i &"#ServerName" /application/apache/conf/httpd.conf&sed -i '/#ServerName/aServerName 127.0.0.1:80' /application/apache/conf/httpd.confgrep -i &"ServerName" /application/apache/conf/httpd.conf&##启动apache&pkill httpd&netstat -lnt&/application/apache/bin/apachectl -t/application/apache/bin/apachectl start##测试[root@LAMP httpd-2.2.27]# curl -I 10.0.0.3HTTP/1.1 200 OKDate: Thu, 24 Sep :18 GMTServer: lvnian IIS6/1.3.5-dev (LVNIAN WIN) DAV/2Last-Modified: Sat, 20 Nov :24 GMTETag: "20c8e-2c-3e"Accept-Ranges: bytesContent-Length: 44Content-Type: text/html本文出自 “” 博客，请务必保留此出处
了这篇文章
类别：┆阅读(0)┆评论(0)