According to OWASP recommendations "Fingerprint Web Application Framework (OTG-INFO-008)" you must turn off specific headers, which are sent by application server or used framework. The less informations attacker knows, the harder it will be to attack. Below are instructions to run in jboss-cli in standalone …