服務器掃描發現漏洞 - 可通過 HTTP 獲取遠端 WWW 服務信息

 public  class HeaderFilterHttpModule: IHttpModule
    {
        public void Init(HttpApplication context)
        {
            context.PreSendRequestHeaders += OnPreSendRequestHeaders;
        }

        public void Dispose()
        { }

        void OnPreSendRequestHeaders(object sender, System.EventArgs e)
        {
            //過濾掉 Response Headers 的banner ,以隱藏服務器和平臺信息
            HttpContext.Current.Response.Headers.Remove("Server");
            HttpContext.Current.Response.Headers.Remove("X-AspNet-Version");
            HttpContext.Current.Response.Headers.Remove("X-Frame-Options");

        }

    }

   <modules>
      <!--改變您的HTTP服務器的缺省banner配置-->
 <add name="HeaderFilterModule" type="命名空間.HeaderFilterHttpModule,命名空間"/>
    </modules>
    <httpProtocol>
      <customHeaders>
        <remove name="X-Powered-By"/>
      </customHeaders>
    </httpProtocol>