![]() ![]() This web server is the only one so far which is announcing ASP.NET within the X-Powered-By line. Microsoft IIS: The length of the ETag values varies between 18 and 23 bytes.Usually the supported http methods are announced as: GET, HEAD, POST, OPTIONS, and TRACE. It is also common that an Apache web server reacts with the statuscode 403 (Forbidden) if a very long URI was proposed within the request. It is very typical for an Apache installation to announce PHP/x.x.x within the X-Powered-By line (it is also common for Abyss). The length of the ETag values varies between 17 and 34 bytes and they are usually surrounded by double-quotes. Apache: Every generation of Apache web servers usually introduces these three values first in an http response header: Date, Server, and X-Powered-By (optional). ![]() The following list shall demonstrate the KAI for some popular implementations: Most web server implementations come with a Key Analysis Index (KAI), a very special and dominant behaviour which allows a very quick identification. This Excel sheet is comparing the four most popular HTTP fingerprinting tools (httprecon, httprint, hmap, and WebserverFP). There are differen applications for http fingerprinting available.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |