Re: Fw: easy remote detection of a running tripwire for webpages syst em

From: Matthew Wakeling (mnw21at_private)
Date: Mon Sep 03 2001 - 01:15:24 PDT

  • Next message: Walter Hop: "KaZaa/Morpheus non-exploits"

    On Fri, 31 Aug 2001, Juan Vera wrote:
    >
    > # echo "ServerTokens Min" >> /whatever/httpd.conf
    > # cp `which httpd` .
    > # ed httpd
    > 507904
    > ,s/Apache\/1.2.34/YOUWONTKNOW!!/g
    > w
    > 507904
    > q
    > # ./httpd
    
    Except that this gives away the number of characters in the original
    version string.
    
    Not too strong a hint, but there you go.
    
    Matthew
    
    -- 
    Riker: Our memory pathways have become accustomed to your sensory input.
    Data:  I understand - I'm fond of you too, Commander. And you too Counsellor
    



    This archive was generated by hypermail 2b30 : Mon Sep 03 2001 - 16:07:11 PDT