Find the answer to your Linux question:
Results 1 to 3 of 3

Thread: Web Servers

Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1

    Web Servers

    Hello, I'd like to know how to check what web server versions are running on an organisation?

  2. #2
    Linux Enthusiast KenJackson's Avatar
    Join Date
    Jun 2006
    Maryland, USA
    The curl -I command (capital i) is a convenient way to do that. Add the -s switch to avoid noise.

    curl -sI | grep Server
    Server: Apache/2.2.3 (Red Hat) PHP/5.3.6 mod_ssl/2.2.3 OpenSSL/0.9.8e-fips-rhel5
    curl -sI | grep Server
    Server: IBM_HTTP_Server
    curl -sI | grep Server
    Server: httpd/1.4.x LaHonda
    curl -sI | grep Server
    Server: Microsoft-IIS/8.0

  3. #3
    Super Moderator Roxoff's Avatar
    Join Date
    Aug 2005
    Nottingham, England
    I think it's probably best to hide this kind of information from anyone who could use it against you. Why advertise the fact that you're running a particular variant of web server that you average cracker is going to know the vulnerabilities for.

    You can hide this info by setting ServerTokens to Prod and ServerSignature to Off in your Apache config, and setting expose_php = off in your php.ini file.

    People who are using your website don't even need this information. If someone has a legitimate purpose, then they can ask politely.
    Linux user #126863 - see

  4. $spacer_open

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts