From: Jon Gorenflo <jon () attackd com>
Date: Thu, 2 Feb 2023 17:19:05 +0000
Seeing JavaScript comments during an NMAP scan can indeed be a concern for clients with proprietary information. The best way to protect this information is to not include it in the source code of the website. If it is absolutely necessary to include it, it can be obfuscated to make it more difficult for an attacker to understand, but it cannot be completely protected from being seen during a scan. Jon From: dev <dev-bounces () nmap org> on behalf of thanatos thanatos via dev <dev () nmap org> Date: Thursday, February 2, 2023 at 10:49 AM To: dev () nmap org <dev () nmap org> Subject: NMAP Scan help I have a question. When I run MAP It displays the javascript comments for the site being scanned. This is a concern for the client as this code has proprietary information. The client is asking if something can be done on their side to prevent this information from being displayed as a part of the NMAP scan? Thank U Thanatos
_______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at https://seclists.org/nmap-dev/
Current thread:
- NMAP Scan help thanatos thanatos via dev (Feb 02)
- Re: NMAP Scan help Jon Gorenflo (Feb 04)
