3 ms·
The arsenal of attacks includes "let's try and figure out server version", too. Because if you know the version, it gives you a shortcut, and you can immediate
by dmitriid 5y ago
The arsenal of attacks includes "let's try and figure out server version", too.
Because if you know the version, it gives you a shortcut, and you can immediately switch to a smaller arsenal designed for that specific version.
- notfed 5y agoOn an individual basis it's sometimes hard to see the harm in this. But more specifically the problem with version identifiers is that attackers can scan across many servers, iterating which ones have a certain vulnerable version.