apache学习安全总结

刺骨的言语ヽ痛彻心扉 2022-07-15 10:11 249阅读 0赞

1、安全优化（此项为防止别人看到目录结构）  
\[root@python htdocs\]\# ls  
wolf.html  
\[root@python htdocs\]\# mv wolf.html laolang.html  
  
  
\[root@python conf\]\# vi httpd.conf  
下面这段去掉Indexes或者-Indexes  
<Directory "/soft/apache/htdocs">   
    Options Indexes FollowSymLinks  
    AllowOverride None  
    Order allow,deny  
    Allow from all  
</Directory>  
网页打开能看到目录结构，所以把Indexes 去掉，此时报403错误(这是就需要修改为指定目录，虚拟主机里面有具体配置)  
192.168.3.41 - - \[03/Nov/2016:23:32:13 +0800\] "GET / HTTP/1.1" 403 202  
192.168.3.41 - - \[03/Nov/2016:23:32:13 +0800\] "GET / HTTP/1.1" 403 202  
2、隐藏版本号  
\[root@python extra\]\# vi httpd-default.conf  
把Full改为Prod  
  
  
\# ServerTokens  
\# This directive configures what you return as the Server HTTP response  
\# Header. The default is 'Full' which sends information about the OS-Type  
\# and compiled in modules.  
\# Set to one of:  Full | OS | Minor | Minimal | Major | Prod  
\# where Full conveys the most information, and Prod the least.  
\#  
ServerTokens Prod  
  
  
主配置文件里启用  
\# Various default settings  
Include conf/extra/httpd-default.conf  
  
  
\[root@python conf\]\# curl -I http://bbs.wolf.com  
HTTP/1.1 200 OK  
Date: Sat, 12 Nov 2016 11:54:12 GMT  
Server: Apache/2.2.31 (Unix)  
Last-Modified: Sun, 06 Nov 2016 14:47:39 GMT  
ETag: "23b6535-14-540a2fd214556"  
Accept-Ranges: bytes  
Content-Length: 20  
Content-Type: text/html  
  
  
\[root@python conf\]\# ../bin/  
ab            apxs          dbmmanage     htdbm         htpasswd      httxt2dbm     rotatelogs      
apachectl     checkgid      htcacheclean  htdigest      httpd         logresolve      
\[root@python conf\]\# ../bin/apachectl -t  
Syntax OK  
\[root@python conf\]\# ../bin/apachectl graceful  
\[root@python conf\]\# curl -I http://bbs.wolf.com  
HTTP/1.1 200 OK  
Date: Sat, 12 Nov 2016 11:54:35 GMT  
Server: Apache  
Last-Modified: Sun, 06 Nov 2016 14:47:39 GMT  
ETag: "23b6535-14-540a2fd214556"  
Accept-Ranges: bytes  
Content-Length: 20  
Content-Type: text/html  
  
  
\[root@python conf\]\#   
3、隐藏版本 （源码中改，然后才configure make make install）  
\[root@python include\]\# pwd  
/soft/apache/include  
\[root@python include\]\# cat ap\_release.h   
  
  
\#define AP\_SERVER\_BASEVENDOR "Apache Software Foundation"  
\#define AP\_SERVER\_BASEPROJECT "Apache HTTP Server"  
\#define AP\_SERVER\_BASEPRODUCT "Apache"  
  
  
\#define AP\_SERVER\_MAJORVERSION\_NUMBER 2  
\#define AP\_SERVER\_MINORVERSION\_NUMBER 2  
\#define AP\_SERVER\_PATCHLEVEL\_NUMBER   31  
\#define AP\_SERVER\_DEVBUILD\_BOOLEAN    0  
  
  
\[root@python include\]\# cat os.h  
\#define PLATFORM "Unix"