[SOLVED] get rid of apache2 banner from scanners

pedropt · 11-03-2018, 03:56 AM

I was on the net looking for solutions to this without success , it looks that no matter what i change , nmap is always able to get servername .

443/tcp open ssl/ssl Apache httpd (SSL-only mode)

no matter what i write in security.conf it wont work .
i have the current config :
ServerTokens Prod
ServerSignature Off

i also website configuration file , but i always get the server name with nmap .

Is there any way to make this work ?
Just remove server id from scanners ?

bathory · 11-03-2018, 04:38 AM

Quote:

Originally Posted by pedropt

I was on the net looking for solutions to this without success , it looks that no matter what i change , nmap is always able to get servername .

443/tcp open ssl/ssl Apache httpd (SSL-only mode)

no matter what i write in security.conf it wont work .
i have the current config :
ServerTokens Prod
ServerSignature Off

i also website configuration file , but i always get the server name with nmap .

Is there any way to make this work ?
Just remove server id from scanners ?

I'm afraid you cannot get rid of the "Apache" banner, unless you recompile the apache sources.
If you want to go ahead and try it, edit ap_release.h and change AP_SERVER_BASEPRODUCT to your liking.

Regards

pedropt · 11-03-2018, 10:26 AM

thanks