News for hackers. Stuff that matters.
Re:Secure Apache and PHP, hide version numbers by route66 on Friday July 22, 2011 @05:02AM (#2792841)
That's my point: For an attack I just send my php 4.1 patchlevel nnn specific script I just bought to 200.000 webservers on some it will work. This is indeed the majority of attempts I'm seeing. So it would break only attacks which do a switch on version specific information. My guess is that it would nor lower the number of attempts nor the success rate, a target will be found anyway, version information or not.

I would guess that scripts which bail out humbly in absence of version information are not in the majority, but I could be wrong.

There are no comments on this comment yet.