httprecon project

advanced web server fingerprinting

"It's a great tool." - Thor, an httprecon user

Test: attack_request (GET [attack_request] HTTP/1.1)
Fingerprint: choose the fingerprint

Common GET request which tries to access an URI which includes well-known attack patterns (e.g. format string, sql injection, cross site scripting).

Name	Description
banner	Banner of the web server, which is usually announced within the Server line.
protocol-name	Name of the protocol at the beginning of the http header (usually HTTP).
protocol-version	Version of the http protocol (common are 0.9, 1.0 and 1.1).
statuscode	Three digit status code of the processed request (e.g. 200 or 404).
statustext	Human readable explaination of the status code (e.g. Found or Forbidden).
header-space	The use of space characters after the line name.
header-capitalafterdash	The use of a capital letter after a dash within a line name.
header-order	The order of the header lines within the response.
options-allowed	The announced http methods. Usually printed only in OPTIONS responses or forbidden requests.
options-public	Similar to options-allowed, the announcement of allowed methods for public use.
options-delimited	The used delimiter symbol for the listed methods within OPTIONS requests.
etag-legth	The length of the ETag as bytes.
etag-quotes	The use of what kind of quotes around the ETag announcement.
content-type	The use of which Content-Type within the received response.
accept-range	The accepted data range by the web site (usually bytes).
connection	Further demands for the given and further connections.
cache-control	Demands for the cache controlling by proxies and web browsers.
pragma	Further details about proxies and cacheing.
vary-order	Set of request-header fields that fully determines if a cache is permitted to use the response.
vary-capitalize	The use of capitalized letters within the vary definitions.
vary-delimiter	Delimiter used to announce the Vary details.
x-powered-by	Optional header which announces some additionally installed software packages.
htaccess-realm	The name of the htaccess authentication.

[back] [upload] [top]