Technical Stuff

Start from basics

VAPT – How to remove apache coyote version from jboss

VAPT – How to remove apache coyote version from jboss
VAPT – How to remove apache coyote version from jboss
5 (100%) 1 vote

Hello, Today we are going to discuss about VAPT i.e. Vulnerability assessment and penetration testing how to remove apache coyote from jboss. For the security purposes VAPT is done to restrict site or application server i.e Jboss from hackers.

 

Big question is how to remove apache coyote from jboss and Where the apache coyote appear? By default, what happens is when site is shut, its shows the version of apache coyote. From which a hacker or a intruder can get version of apache coyote. So, to remove it we will see the step by step procedure to remove it.

 

Received a lot of mail for VAPT for Jboss. So, we are starting our sessions of VAPT.

Application Server : Jboss

Version : 5.X

Path :

$JBOSS_HOME/server/$PROFILE/deploy/jbossweb.sar/server.xml.

Open the server.xml

<!-- A HTTP/1.1 Connector on port 8080 -->

<Connector protocol="HTTP/1.1" port="8080" address="${jboss.bind.address}"

connectionTimeout="20000" redirectPort="8443"

server="somevalue" /> <!-- Add this -->

<!-- A AJP 1.3 Connector on port 8009 -->

<Connector protocol="AJP/1.3" port="8009" address="${jboss.bind.address}"

redirectPort="8443"

server="somevalue" /> <!-- Add this -->

 

This way you can remove the apache coyote from Jboss shut page.

This look quite simple but i can bet, You will unable to find this anywhere on internet in such easily steps and its tried and tested.

 

So, Happy Learning !!!

 

If you have doubt or queries, you can definetely comment us or can mail us on [email protected]

 

If you have any recommedation for future blog, You can email us on [email protected]

 

Related Searches :

VAPT – DISABLING HTTP METHODS

One thought on “VAPT – How to remove apache coyote version from jboss

Leave a Reply

%d bloggers like this: