安全漏洞系列（二）站点信息侦测（C#MVC）

            //隐藏MVC版本信息（节点：X-AspNetMvc-Version:）
            MvcHandler.DisableMvcRespOnseHeader= true;

    <httpRuntime targetFramework="4.5.2" enableVersionHeader="false"  />

  <system.webServer>
    <httpProtocol>
      <customHeaders>
        <remove name="X-Powered-By" />
      customHeaders>
    httpProtocol>
  system.webServer>

 1         /// 

 2         /// 隐藏/修改 Response Header 中的Server节点（IIS版本信息）
 3         /// 
 4         /// 
 5         /// 
 6         protected void Application_PreSendRequestHeaders(object sender, EventArgs e)
 7         {
 8             HttpApplication application = sender as HttpApplication;
 9             if (application != null && application.Context != null)
10             {
11                 //移除Server
12                 application.Context.Response.Headers.Remove("Server");
13                 //修改Server的显示信息
14                 //application.Context.Response.Headers.Set("Server", "MyServer");
15 
16                 //移除X-AspNet-Version，和上面效果相同
17                 //application.Context.Response.Headers.Remove("X-AspNet-Version");
18                 //移除X-AspNetMvc-Version，和上面效果相同
19                 //application.Context.Response.Headers.Remove("X-AspNetMvc-Version");
20             }
21 
22         }