Service Catalog - Check whether HTTP method PUT or DELETE from Tomcat is blocked or not
Apache Tomcat Server Information Disclosure by Verbose OWASP - Narayana Tutorial
Tomghost - Pentest Everything
caching - How to set Expires HTTP header on a single JS file in Apache Tomcat? - Stack Overflow
How To Disable ETags in Apache Server - Ubiq BI
Basic Tomcat security configuration recommendations - Documentation for Product Quality and Security Group - BMC Documentation
Apache Tomcat as a container for Servlets and JSP - ppt download
HTTP ETag - Wikipedia
Hunting and Exploiting the Apache Ghostcat | by just_a_noob | Medium
tomcat/DefaultServlet.java at main · apache/tomcat · GitHub
Learning the code way: gzip your Tomcat response
Speed Tips: Turn Off ETags
MiddlewareBox: Disable/Remove Server: Apache header info version (Apache2.4)
Apache Tomcat Running Tomcat
Nginx + Tomcat load balancing cluster
Speed Tips: Turn Off ETags
Apache Tomcat Hardening and Security Guide
pyn3rd on Twitter: "CVE-2017-12616, Tomcat Information Disclosure, %20 or ::$DATA or . works,but / not work, cause DefaultServlet detect / in the end. https://t.co/KC3k7nJ2P5" / Twitter
Apache Tomcat Hardening and Security Guide
Workaround: Proxied HTTP requests fail due to HTTP 500 error: NullPointerException - Library: Articles - Jazz Community Site
Setup Nginx as a Reverse Proxy for Apache Tomcat - DevOps4Solutions DevOps4Solutions