httprecon project
advanced web server fingerprinting
"httprecon is currently one of the best tools for fingerprinting web servers." - Sub-Zero, security-freak.blogspot.com
Test: delete_existing (DELETE / HTTP/1.1)
Fingerprint: vary-order

Set of request-header fields that fully determines if a cache is permitted to use the response.

ImplementationVary-order
1AOLserver 4.0.10Accept-Encoding
2Apache 1.3.33accept-language,accept-charset
3Apache 1.3.34Accept-Encoding,User-Agent
4Apache 2.0.46Accept-Encoding
5Apache 2.0.50accept-language,accept-charset
6Apache 2.0.52Accept-Encoding,User-Agent
7Apache 2.0.54Accept-Encoding
8Apache 2.0.54accept-language,accept-charset
9Apache 2.0.54negotiate,accept-language
10Apache 2.0.55Accept-Encoding
11Apache 2.0.55accept-language,accept-charset
12Apache 2.0.59accept-language,accept-charset
13Apache 2.0.63User-Agent,Accept-Encoding
14Apache 2.2.11Accept-Encoding
15Apache 2.2.2Accept-Encoding
16Apache 2.2.3accept-language,accept-charset
17Apache 2.2.4Accept-Encoding,Cookie
18Apache 2.2.6accept-language,accept-charset
19Apache 2.3.0Accept-Encoding
20Microsoft IIS 6.0Accept-Encoding
21Mongrel 1.0Accept-Encoding
22Roxen 4.5.111Cookie,User-Agent
23Zeus 4.3Accept-Encoding
24Zope 2.10.4Accept-Encoding
25Zope 2.7.6Cookie
26Zope 2.8.4Accept-Encoding
27Zope 2.8.6Accept-Encoding
28Zope 2.9.6Accept-Encoding
29Zope 2.9.6Accept-Encoding,User-Agent
30lighttpd 1.4.18Accept-Encoding,Cookie
31lighttpd 1.4.19Accept-Encoding,User-Agent
32nginx 0.5.33Accept-Encoding

[back] [upload] [top]