Information Security Knowledge Blog by Vinesh Redkar

Information Security Knowledge Blog by Vinesh Redkar

Hide the IIS Version: Disable Version Disclosure for 8.0/8.5

UpdatedMay 1, 2026

•1 min read•View as Markdown

This guide explains how to hide or replace the IIS server banner (version information) in IIS 8.0 and 8.5 using the URL Rewrite module.

Step 1:
Install the latest version of Microsoft Web Platform Installer (https://www.microsoft.com/web/downloads/platform.aspx/).
Step 2:
Install URL Rewrite 2.0 using Web Platform Installer on the server.

Step 3:
After installation of same, URL Rewrite starts appearing in IIS Manager.

Step 4:
Add the Outbound Rule using URL Rewrite, to replace the Response Banner to custom banner.

Step 5:
Else we can add the below shown code in web.config file also.

Thanks to my friend:
Pralhad Chaskar(c0d3xpl0it)‏
http://c0d3xpl0it.blogspot.ae/

Comments

Join the discussion

No comments yet. Be the first to comment.

More from this blog

Protecting Your Mobile App from AI-Powered Malware (PromptSpy)

Introduction With the rise of advanced threats like AI-driven Android malware, attackers are no longer just stealing data—they are interacting with apps like real users. Malware such as PromptSpy can

May 1, 20264 min read

Bypassing Application Whitelisting Solution SolidCore Part I

Bypassing anti-virus has become fairly simple in the malware world today. As a result, companies are beginning to realize that application whitelisting is another tool to consider adding to their crit

Aug 23, 20205 min read

Decryptor for Wanacry Ransomware

WannaCry A ransomware that is exploiting “ETERNALBLUE” a vulnerability found in the NSA exploits released by the ShadowBrokers.The WannaCry ransomware attack was a worldwide cyberattack by the WannaCr

Apr 23, 20172 min read

AT&T Arbitrary Code Execution Vulnerability

Recently, I found an interesting issue Remote Code Execution for AT&T bug bounty program. But before going into this let’s understand Arbitrary Code Execution – Arbitrary Code Execution also know as

Jul 26, 20162 min read

Windows Mobile Application Security – Part II

Now Next Step accessing application internal storage Accessing Internal Storage of APPLICATION using reg eDITOR Application Windows do not allow access to the internal storage of its application even

May 13, 20164 min read

Information Security Knowledge Blog by Vinesh Redkar

16 posts