Page 1 of 1

[SOLVED] turn off Murmur server information

Posted: 04 May 2011, 08:30
by stupidzorz
Hello reader(s),

I would like to turn off the information that Murmur sends to the client about what operating system the server is running on and which version. This seems a huge security hole to me. Sadly enough I couldnt find a way to turn this off or to spoof it.

How to remove/disable this "feature"?

Thanks in advance.

Re: turn off Murmur server information

Posted: 04 May 2011, 11:03
by rawnar
Add the following line to your murmur.ini to stop sending this information.

Code: Select all

sendversion=False

Re: turn off Murmur server information

Posted: 04 May 2011, 11:56
by stupidzorz
rawnar wrote:Add the following line to your murmur.ini to stop sending this information.

Code: Select all

sendversion=False
Perfect! This is exactly what I wanted. http://img638.imageshack.us/img638/7615/versioninfo.jpg

In my opinion they should set "sendversion" on "false" by default.

Thank you Rawnar for your quick reply!

Re: turn off Murmur server information

Posted: 17 May 2011, 11:27
by ngollan
Just to go on the record:
stupidzorz wrote:In my opinion they should set "sendversion" on "false" by default.
TBH, I don't see the real issue. If anything, it'd be fake security by very weak obscurity, since there are a good number of other ways for OS profiling. In addition, most vulnerabilities result from services (as opposed to the OS proper), and those aren't exposed by murmur.

It's a bit like attempting to secure a WLAN by disabling SSID broadcasts. Spoiler: it doesn't work :P

Re: turn off Murmur server information

Posted: 19 May 2011, 12:44
by kissaki
I’d like the setting to be in the ini.
So ppl. know about it and can falsify, if they want to.

Re: turn off Murmur server information

Posted: 19 May 2011, 21:14
by hacst
kissaki wrote:I’d like the setting to be in the ini.
So ppl. know about it and can falsify, if they want to.
Done.

Re: turn off Murmur server information

Posted: 14 Nov 2019, 13:59
by PhillipHaugh
rawnar wrote:
04 May 2011, 11:03
Add the following line to your murmur.ini to stop sending this information.

Code: Select all

sendversion=False
https://cheapessaywriter.net/

Thank you) It works ! Easy solution.