{"id":39299395,"url":"https://github.com/torden/ngx_hidden_signature_patch","last_synced_at":"2026-01-18T01:28:45.404Z","repository":{"id":22032586,"uuid":"81054945","full_name":"torden/ngx_hidden_signature_patch","owner":"torden","description":"Just! a Hide Server Signature of Nginx Web Server in response header and in response error","archived":false,"fork":false,"pushed_at":"2024-06-26T23:30:39.000Z","size":27,"stargazers_count":14,"open_issues_count":0,"forks_count":1,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-06-27T03:02:57.755Z","etag":null,"topics":["hidden-version","nginx","patch","security"],"latest_commit_sha":null,"homepage":"https://torden.github.io/ngx_hidden_signature_patch/","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/torden.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-02-06T06:24:02.000Z","updated_at":"2024-06-26T23:30:42.000Z","dependencies_parsed_at":"2024-06-27T02:57:54.841Z","dependency_job_id":null,"html_url":"https://github.com/torden/ngx_hidden_signature_patch","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/torden/ngx_hidden_signature_patch","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/torden%2Fngx_hidden_signature_patch","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/torden%2Fngx_hidden_signature_patch/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/torden%2Fngx_hidden_signature_patch/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/torden%2Fngx_hidden_signature_patch/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/torden","download_url":"https://codeload.github.com/torden/ngx_hidden_signature_patch/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/torden%2Fngx_hidden_signature_patch/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28526519,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-18T00:39:45.795Z","status":"ssl_error","status_checked_at":"2026-01-18T00:39:39.467Z","response_time":85,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hidden-version","nginx","patch","security"],"created_at":"2026-01-18T01:28:44.680Z","updated_at":"2026-01-18T01:28:45.386Z","avatar_url":"https://github.com/torden.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\n# Just! a Hide Server Signature of Nginx Web Server\n\nDepending on the environment of production, We may need to hide server signature.\n\nAs We knew, Nginx can be turned on and off in the \"Server\" response header field and in the Embedded Error pages\n\nHowever it's not enough.\n\n[![Build Status](https://github.com/torden/ngx_hidden_signature_patch/actions/workflows/ngx_hidden_signature_patch.yml/badge.svg)](https://github.com/torden/ngx_hidden_signature_patch/actions)\n\n## What is this?\n\nThis is a simple patches which hide server signature of nginx web server.\n\n## List of Tested Version\n\n\n### For HTTP, HTTPS\n\n|*Nginx Version*|*Patch File 1*|*Patch File 2*|\n|---|---|---|\n|1.0.x|[nginx-1.0-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0-ngx_http_header_filter_module.c.patch)|[nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch)|\n|1.2.x|[nginx-1.2-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.2-ngx_http_header_filter_module.c.patch)|[nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch)|\n|1.4.x|[nginx-1.4-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.4-ngx_http_header_filter_module.c.patch)|[nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch)|\n|1.6.x|[nginx-1.6-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.6-ngx_http_header_filter_module.c.patch)|[nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch)|\n|1.8.x|[nginx-1.8-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.8-ngx_http_header_filter_module.c.patch)|[nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch)|\n|1.10.x|[nginx-1.10-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.10-ngx_http_header_filter_module.c.patch)|[nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch)|\n|1.11.x|[nginx-1.11-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.11-ngx_http_header_filter_module.c.patch)|[nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.0.15-1.11.9-ngx_http_special_response.c.patch)|\n|1.12.x|[nginx-1.12.0-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.12.0-ngx_http_header_filter_module.c.patch)|[nginx-1.12.0-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.12.0-ngx_http_special_response.c.patch)|\n|1.13.x|[nginx-1.13.0-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.13.0-ngx_http_header_filter_module.c.patch)|[nginx-1.13.0-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.13.0-ngx_http_special_response.c.patch)|\n|1.14.x ~ 1.23.x|[nginx-1.14.x-1.17.x-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.17.x-ngx_http_header_filter_module.c.patch)|[nginx-1.14.x-1.17.x-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.17.x-ngx_http_special_response.c.patch)|\n|1.22.x ~ 1.24.x|[nginx-1.22.x-1.23.x-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.22.x-1.23.x-ngx_http_header_filter_module.c.patch)|[nginx-1.14.x-1.23.x-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.23.x-ngx_http_special_response.c.patch)|\n|1.22.x ~ 1.27.x|[nginx-1.22.x-1.23.x-ngx_http_header_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.22.x-1.23.x-ngx_http_header_filter_module.c.patch)|[nginx-1.14.x-1.23.x-ngx_http_special_response.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.23.x-ngx_http_special_response.c.patch)|\n\n### For HTTP/2\n\n|*Nginx Version(http v2 module)*|*Patch File*|\n|---|---|\n|1.9.x ~ |[nginx-1.9.5-ngx_http_v2_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.9.5-ngx_http_v2_filter_module.c.patch)|\n|1.10.x ~ |[nginx-1.10.3-ngx_http_v2_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.10.3-ngx_http_v2_filter_module.c.patch)|\n|1.12.x ~ |[nginx-1.12.2-ngx_http_v2_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.12.2-ngx_http_v2_filter_module.c.patch)|\n|1.14.x ~ 1.23.x|[nginx-1.14.x-1.17.x-ngx_http_v2_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.17.x-ngx_http_v2_filter_module.c.patch) OR [nginx-1.14.x-1.23.x-ngx_http_v2_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.23.x-ngx_http_v2_filter_module.c.patch)|\n|1.25.x ~ |[nginx-1.25.x-ngx_http_v2_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.25.x-ngx_http_v2_filter_module.c.patch)|\n\n### For HTTP/3\n\n|*Nginx Version(http v3 module)*|*Patch File*|\n|---|---|\n|1.25.x ~ |[nginx-1.25.x-ngx_http_v3_filter_module.c.patch](https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.25.x-ngx_http_v3_filter_module.c.patch)|\n\n\n## Example Patch\n\n```bash\ncurl -s -O https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.22.x-1.23.x-ngx_http_header_filter_module.c.patch\ncurl -s -O https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.23.x-ngx_http_special_response.c.patch\ncurl -s -O https://github.com/torden/ngx_hidden_signature_patch/raw/master/nginx-1.14.x-1.23.x-ngx_http_v2_filter_module.c.patch\ncurl -s -O http://nginx.org/download/nginx-1.23.1.tar.gz\n\ntar xvzf nginx-1.23.1.tar.gz\ncd nginx-1.23.1\n\npatch -p0 \u003c ../ngx_hidden_signature_patch/nginx-1.22.x-1.23.x-ngx_http_header_filter_module.c.patch\npatch -p0 \u003c ../ngx_hidden_signature_patch/nginx-1.14.x-1.23.x-ngx_http_special_response.c.patch\npatch -p0 \u003c ../ngx_hidden_signature_patch/nginx-1.14.x-1.23.x-ngx_http_v2_filter_module.c.patch\n\n./configure\nmake\nmake install\n```\n\n## Hard Patch (nginx -V)\n```\ntar xvzf nginx-1.xx.x.tar.gz\ncd nginx-1.xx.x\n\nperl -p -i -e \"s/[0-9]+\\.[0-9]+\\.[0-9]+//gi\" src/core/nginx.h\nperl -p -i -e \"s/nginx\\///gi\" src/core/nginx.h\n\n```\n\n### Generally Response of Nginx\n\nYou can looking for server signature.\n\n```bash\nHTTP/1.1 404 Not Found\n*Server: nginx/1.10.3*\nDate: Mon, 06 Feb 2017 05:45:59 GMT\nContent-Type: text/html\nContent-Length: 169\nConnection: keep-alive\n\nHTTP/2 200\n*server: nginx/1.10.3*\ndate: Mon, 06 Feb 2017 05:45:25 GMT\ncontent-type: text/html\ncontent-length: 612\nlast-modified: Thu, 30 Jan 2020 05:03:50 GMT\netag: \"5e3263b6-264\"\naccept-ranges: bytes\n\n\u003chtml\u003e\n\u003chead\u003e\u003ctitle\u003e404 Not Found\u003c/title\u003e\u003c/head\u003e\n\u003cbody bgcolor=\"white\"\u003e\n\u003ccenter\u003e\u003ch1\u003e404 Not Found\u003c/h1\u003e\u003c/center\u003e\n*\u003chr\u003e\u003ccenter\u003enginx/1.10.3\u003c/center\u003e*\n\u003c/body\u003e\n\u003c/html\u003e\n```\n\n\n### Response of Nginx after adding a \"server_tokens off;\" to nginx.conf\n\nYou can looking for server signature.\n\n```bash\nHTTP/1.1 404 Not Found\n*Server: nginx*\nDate: Mon, 06 Feb 2017 06:03:59 GMT\nContent-Type: text/html\nContent-Length: 162\nConnection: keep-alive\n\nHTTP/2 200\n*server: nginx*\ndate: Mon, 06 Feb 2017 05:45:25 GMT\ncontent-type: text/html\ncontent-length: 612\nlast-modified: Thu, 30 Jan 2020 05:03:50 GMT\netag: \"5e3263b6-264\"\naccept-ranges: bytes\n\n\u003chtml\u003e\n\u003chead\u003e\u003ctitle\u003e404 Not Found\u003c/title\u003e\u003c/head\u003e\n\u003cbody bgcolor=\"white\"\u003e\n\u003ccenter\u003e\u003ch1\u003e404 Not Found\u003c/h1\u003e\u003c/center\u003e\n*\u003chr\u003e\u003ccenter\u003enginx\u003c/center\u003e*\n\u003c/body\u003e\n\u003c/html\u003e\n```\n\n\n## Response Header of Nginx After Patched\n\nMake Sure the removed server signature\n\n```bash\nHTTP/1.1 404 Not Found\nDate: Mon, 06 Feb 2017 05:45:25 GMT\nContent-Type: text/html\nContent-Length: 134\nConnection: keep-alive\n\nHTTP/2 200\ndate: Mon, 06 Feb 2017 05:45:25 GMT\ncontent-type: text/html\ncontent-length: 612\nlast-modified: Thu, 30 Jan 2020 05:03:50 GMT\netag: \"5e3263b6-264\"\naccept-ranges: bytes\n\n\u003chtml\u003e\n\u003chead\u003e\u003ctitle\u003e404 Not Found\u003c/title\u003e\u003c/head\u003e\n\u003cbody bgcolor=\"white\"\u003e\n\u003ccenter\u003e\u003ch1\u003e404 Not Found\u003c/h1\u003e\u003c/center\u003e\n\u003c/body\u003e\n\u003c/html\u003e\n```\n\n---\n\nplz feel free\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftorden%2Fngx_hidden_signature_patch","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftorden%2Fngx_hidden_signature_patch","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftorden%2Fngx_hidden_signature_patch/lists"}