search

redteaminfra / redteam-infra

97 stars 25 forks source link

Server header in Response #89

Open willk opened 8 months ago

willk commented 8 months ago

From SAR

I noticed some of your nginx/openresty web servers return server headers:

HTTP/1.1 403 Forbidden Server: openresty/1.19.3.1

Generally, I flag this as limited unless it can be exploited (not to mention it looks up to the latest release). I'm not sure if this is intentional but just recommend configuring nginx/openresty to not return the Server header.