免费注册 查看新帖 |

Chinaunix

  平台 论坛 博客 文库
最近访问板块 发新帖
楼主: byebyebyebye
打印 上一主题 下一主题

想找个网管的工作(简历) [复制链接]

论坛徽章:
0
1 [报告]
发表于 2005-07-16 18:09 |显示全部楼层

想找个网管的工作(简历)

[root@localhost nikto-1.34]# nikto.pl -h 218.94.124.29
-***** SSL support not available (see docs for SSL install instructions) *****
---------------------------------------------------------------------------
- Nikto 1.34/1.31     -     www.cirt.net
+ Target IP:       218.94.124.29
+ Target Hostname: 218.94.124.29
+ Target Port:     80
+ Start Time:      Sat Jul 16 17:56:42 2005
---------------------------------------------------------------------------
- Scan is dependent on "Server" string which can be faked, use -g to override
+ Server: Apache/2.0.54 (Unix) PHP/4.3.8
+ Allowed HTTP Methods: GET,HEAD,POST,OPTIONS,TRACE
+ HTTP method 'TRACE' is typically only used for debugging. It should be disable
d.
+ PHP/4.3.8 appears to be outdated (current is at least 5.0.1)
+ 2.0.54 (Unix) PHP/4.3.8 - TelCondex Simpleserver 2.13.31027 Build 3289 and bel
ow allow directory traversal with '/.../' entries.
+ /~root - Enumeration of users is possible by requesting ~username (responds wi
th Forbidden for real users, not found for non-existent users) (GET).
+ /icons/ - Directory indexing is enabled, it should only be enabled for specifi
c directories (if required). If indexing is not used all, the /icons directory s
hould be removed. (GET)
+ /manual/images/ - Apache 2.0 directory indexing is enabled, it should only be
enabled for specific directories (if required). Apache's manual should be remove
d and directory indexing disabled. (GET)
+ /test - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer1.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer2.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer3.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/buffer4.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/declaration/IntegerOverflow.jsp - Needs Auth: (realm "frank share we
b"
+ /test/jsp/extends1.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/extends2.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/Language.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/pageAutoFlush.jsp - Needs Auth: (realm "frank share web"
+ /test/jsp/pageDouble.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageExtends.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageImport2.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageInfo.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageInvalid.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageIsErrorPage.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageIsThreadSafe.jsp - Needs Auth: (realm "frank share web")
+ /test/jsp/pageSession.jsp - Needs Auth: (realm "frank share web")
+ /test/realPath.jsp - Needs Auth: (realm "frank share web")
+ / - TRACE option appears to allow XSS or credential theft. See http://www.cgisecurity.com/whitehat-mirror/WhitePaper_screen.pdf for details (TRACE)

论坛徽章:
0
2 [报告]
发表于 2005-07-16 22:56 |显示全部楼层

想找个网管的工作(简历)

那怎么做别人才看不出自己的php,apache 版本呢?
我以为不让别人通过telnet 和 404 错误看到自己的apache php 版本就可以了呢icon_smile.gif

谢谢各位


你试试添加或者修改这两行 httpd.conf
ServerTokens Minimal
ServerSignature Off

祝好运!

论坛徽章:
0
3 [报告]
发表于 2005-07-18 11:17 |显示全部楼层

想找个网管的工作(简历)

php 版本是看不到了 但是apache 版本还是回显示出来


那就用下面的语句啦..
ServerTokens Prod
ServerSignature Off


一定看不到了..这次...

论坛徽章:
0
4 [报告]
发表于 2005-07-18 13:09 |显示全部楼层

想找个网管的工作(简历)

  
认真看一下 apache 的帮助手册你会得到答案的,自己发掘一下啦,那样才可以学到东西...
您需要登录后才可以回帖 登录 | 注册

本版积分规则 发表回复

  

北京盛拓优讯信息技术有限公司. 版权所有 京ICP备16024965号-6 北京市公安局海淀分局网监中心备案编号:11010802020122 niuxiaotong@pcpop.com 17352615567
未成年举报专区
中国互联网协会会员  联系我们:huangweiwei@itpub.net
感谢所有关心和支持过ChinaUnix的朋友们 转载本站内容请注明原作者名及出处

清除 Cookies - ChinaUnix - Archiver - WAP - TOP