Alter the Advertised server.number String (Manual)
Skills in this repository
CyberStrikeus/CyberStrike - Page 29
SkillsMP has collected 7,442 skills from CyberStrikeus/CyberStrike. Open a skill to review its source and details.
CyberStrikeus/CyberStrikeShowing 40 of 7,442 collected skills.
Alter the Advertised server.built Date (Manual)
Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors (Automated)
Disable client facing Stack Traces (Automated)
Turn off TRACE (Automated)
Ensure Sever Header is Modified To Prevent Information Disclosure (Automated)
Set a nondeterministic Shutdown command value (Automated)
Disable the Shutdown port (Automated)
Restrict access to $CATALINA_HOME (Automated)
Restrict access to $CATALINA_BASE (Automated)
Application specific logging (Automated)
Specify file handler in logging.properties files (Automated)
Ensure className is set correctly in context.xml (Automated)
Ensure directory in context.xml is a secure location (Manual)
Ensure pattern in context.xml is correct (Automated)
Ensure directory in logging.properties is a secure location (Automated)
Restrict runtime access to sensitive packages (Automated)
Disabling auto deployment of applications (Automated)
Disable deploy on startup of applications (Automated)
Disable deploy on startup of applications (Automated)
Remove extraneous files and directories
Disable Unused Connectors
Ensure Web content directory is on a separate partition from the Tomcat system files
Configure connectionTimeout
Configure maxHttpHeaderSize
Force SSL for all applications
Increase the entropy in session identifiers
Do not allow symbolic linking
Do not run applications as privileged
Do not allow cross context requests
Do not resolve hosts on logging valves
Enable memory leak listener
Setting Security Lifecycle Listener
Restrict access to the web administration
use the logEffectiveWebXml and metadata-complete settings for deploying applications in production
Restrict manager application
Force SSL when accessing the manager application
Rename the manager application
Enable strict servlet Compliance
Turn off session façade recycling