Knowledgebase

how create fake OS fingerprint

Posted by etusha, 09-09-2008, 08:11 AM

how create fake OS fingerprint ? i mean im using centos5.2 apache 2.2.8 if a hacker scan my server it show Windows server 2003 ,IIS 7.0 ,etc etc i belive that can increase security

Posted by Patrick, 09-09-2008, 11:34 AM

I assume you're referring to the NMAP OS fingerprinting, which is done based on TCP/IP stack signatures and what not? There's not a lot on the subject in terms of defeating it, but the Wikipedia page has a few external links (one for Windows!) that might help. Link: http://en.wikipedia.org/wiki/OS_fingerprinting

Posted by TheITAdvisory, 09-09-2008, 08:41 PM

Seems like ICMP filtering is in need for TCP/IP sequence/response times mapping. Also, for things like HTTP/Apache install mod_security and search how to make it change the server signature.

Posted by etusha, 09-10-2008, 05:54 PM

any good tools or tutorials that can help me

Posted by learnerman, 09-10-2008, 07:18 PM

Hello I am not sure if snort can help on this matter (do not use it in production server / high load problem). Thank you !

Add to Favourites

Print this Article