ServerMask

Masking is imperious for those who wish to protect their Web servers from intruder “fingerprinting”. To create such protection, users must hide the unnecessary HTTP header and response data, as well as file extensions such as .ASPX or .ASP, who are clear indicators for attackers that a site is running under a Microsoft server.

ServerMask was created in order to provide people with a tool that could help them protect their Web server from attackers that could identify their operating system and server characteristics. Eliminating hacker pre-attack reconnaissance procedures could save users’ Web servers from numerous attacks.

The application works by removing HTTP response data, modifying cookie values and obscuring any other response information that could provide attackers with information for defining their attack strategy.

One will be able to access advanced options for creating custom headers, Apache emulation, randomize response information or completely removing any header information. The header removal feature is especially useful and it allows users to either remove it, replace it with other Web server signatures or a custom server name.

Users will be able to create and manage multiple profiles, with specific settings for each corresponding domain. By helping them mask server information, the utility allows people to protect their servers and build more secure networks, therefore obtaining better results on security evaluations.

ServerMask also provides self-generated decoy cookies and headers, as well as customizable HTTP error messages, that are aimed at confusing the potential attackers.