Fórumok
general knowledge (Low priority)
mohammad azaruddin, módosítva 10 év-val korábban
general knowledge (Low priority)
Expert Bejegyzések: 492 Csatlakozás dátuma: 2012.09.17. Legújabb bejegyzések
How to find if any portal developed using LIFERAY..Is there any browser tool to find out.
David H Nebinger, módosítva 10 év-val korábban
RE: general knowledge (Low priority)
Liferay Legend Bejegyzések: 14917 Csatlakozás dátuma: 2006.09.02. Legújabb bejegyzések
Hmm, there was a sniffer tool out there that you could point at a site and it could tell you what type of software it was running and it is capable of identifying Liferay servers. I forget the name of the tool, but I know it exists cuz I used it ;-)
Basically there's a header in every returned HTTP response that indicates the Liferay version, so it's really a dead giveaway that you're running Liferay. I had submitted a bug and a code fix to use a property in portal-ext.properties so the header could be disabled (I don't want to expose anything I don't have to for the hackers), but it never got picked up.
Basically there's a header in every returned HTTP response that indicates the Liferay version, so it's really a dead giveaway that you're running Liferay. I had submitted a bug and a code fix to use a property in portal-ext.properties so the header could be disabled (I don't want to expose anything I don't have to for the hackers), but it never got picked up.
mohammad azaruddin, módosítva 10 év-val korábban
RE: general knowledge (Low priority)
Expert Bejegyzések: 492 Csatlakozás dátuma: 2012.09.17. Legújabb bejegyzések
David H Nebinger, módosítva 10 év-val korábban
RE: general knowledge (Low priority)
Liferay Legend Bejegyzések: 14917 Csatlakozás dátuma: 2006.09.02. Legújabb bejegyzések
Wappalizer is the tool i was thinking of, it's a plugin for firefox.
James Falkner, módosítva 10 év-val korábban
RE: general knowledge (Low priority)
Liferay Legend Bejegyzések: 1399 Csatlakozás dátuma: 2010.09.17. Legújabb bejegyzésekDavid H Nebinger:
I had submitted a bug and a code fix to use a property in portal-ext.properties so the header could be disabled (I don't want to expose anything I don't have to for the hackers), but it never got picked up.
You mean this one? It was fixed in 6.1, so now you can do this:
http.header.version.verbosity=full
Gives full name+version
http.header.version.verbosity=partial
Just the name
http.header.version.verbosity=Liferay Portal Community Edition
None! (if running EE, then use Liferay Portal Enterprise Edition)
David H Nebinger, módosítva 10 év-val korábban
RE: general knowledge (Low priority)
Liferay Legend Bejegyzések: 14917 Csatlakozás dátuma: 2006.09.02. Legújabb bejegyzések
Wahoo! I stand corrected!
zz top, módosítva 10 év-val korábban
RE: general knowledge (Low priority)
New Member Bejegyzések: 18 Csatlakozás dátuma: 2012.07.20. Legújabb bejegyzések
Existence of liferay is easy to verify from requests even probably portlet instance(from source) ids are liferay specific.
At least some versions will also leak the build number in liferay generated css/js urls with param b, ie. search source for &b=
Also, to find liferay portals google search: p_p_id=15
At least some versions will also leak the build number in liferay generated css/js urls with param b, ie. search source for &b=
Also, to find liferay portals google search: p_p_id=15