Fórum
general knowledge (Low priority)
mohammad azaruddin, modificado 10 Anos atrás.
general knowledge (Low priority)
Expert Postagens: 492 Data de Entrada: 17/09/12 Postagens Recentes
How to find if any portal developed using LIFERAY..Is there any browser tool to find out.
David H Nebinger, modificado 10 Anos atrás.
RE: general knowledge (Low priority)
Liferay Legend Postagens: 14916 Data de Entrada: 02/09/06 Postagens Recentes
Hmm, there was a sniffer tool out there that you could point at a site and it could tell you what type of software it was running and it is capable of identifying Liferay servers. I forget the name of the tool, but I know it exists cuz I used it ;-)
Basically there's a header in every returned HTTP response that indicates the Liferay version, so it's really a dead giveaway that you're running Liferay. I had submitted a bug and a code fix to use a property in portal-ext.properties so the header could be disabled (I don't want to expose anything I don't have to for the hackers), but it never got picked up.
Basically there's a header in every returned HTTP response that indicates the Liferay version, so it's really a dead giveaway that you're running Liferay. I had submitted a bug and a code fix to use a property in portal-ext.properties so the header could be disabled (I don't want to expose anything I don't have to for the hackers), but it never got picked up.
mohammad azaruddin, modificado 10 Anos atrás.
RE: general knowledge (Low priority)
Expert Postagens: 492 Data de Entrada: 17/09/12 Postagens Recentes
David H Nebinger, modificado 10 Anos atrás.
RE: general knowledge (Low priority)
Liferay Legend Postagens: 14916 Data de Entrada: 02/09/06 Postagens Recentes
Wappalizer is the tool i was thinking of, it's a plugin for firefox.
James Falkner, modificado 10 Anos atrás.
RE: general knowledge (Low priority)
Liferay Legend Postagens: 1399 Data de Entrada: 17/09/10 Postagens RecentesDavid H Nebinger:
I had submitted a bug and a code fix to use a property in portal-ext.properties so the header could be disabled (I don't want to expose anything I don't have to for the hackers), but it never got picked up.
You mean this one? It was fixed in 6.1, so now you can do this:
http.header.version.verbosity=full
Gives full name+version
http.header.version.verbosity=partial
Just the name
http.header.version.verbosity=Liferay Portal Community Edition
None! (if running EE, then use Liferay Portal Enterprise Edition)
David H Nebinger, modificado 10 Anos atrás.
RE: general knowledge (Low priority)
Liferay Legend Postagens: 14916 Data de Entrada: 02/09/06 Postagens Recentes
Wahoo! I stand corrected!
zz top, modificado 10 Anos atrás.
RE: general knowledge (Low priority)
New Member Postagens: 18 Data de Entrada: 20/07/12 Postagens Recentes
Existence of liferay is easy to verify from requests even probably portlet instance(from source) ids are liferay specific.
At least some versions will also leak the build number in liferay generated css/js urls with param b, ie. search source for &b=
Also, to find liferay portals google search: p_p_id=15
At least some versions will also leak the build number in liferay generated css/js urls with param b, ie. search source for &b=
Also, to find liferay portals google search: p_p_id=15