httprecon project
advanced web server fingerprinting
"Marc Ruef developed a new tool to make fingerprinting of web servers much easier. While using different test cases the hard requirements of such an identification can be met much better and more precise." - Martin Rutishauser, OneConsult GmbH, Director Training and Research
Test: get_nonexisting (GET /404test.html HTTP/1.1)
Fingerprint: cache-control

Demands for the cache controlling by proxies and web browsers.

ImplementationCache-control
1AOLserver 3.4.2no-cache, must-revalidate, post-check=0, pre-check=0
2AOLserver 4.0.10max-age=0
3AOLserver 4.0.10no-cache, no-store, private, max-age=0
4AOLserver 4.0.10private, no-cache, no-cache="Set-Cookie", no-store,
must-revalidate, max-age=0, proxy-revalidate, no-transform
5Abyss 2.5.0.0 X1no-store, no-cache, must-revalidate
6Apache 1.3.26no-store, no-cache, must-revalidate, post-check=0, pre-check=0
7Apache 1.3.26post-check=0, pre-check=0
8Apache 1.3.33max-age=60
9Apache 1.3.34no-cache
10Apache 1.3.37private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
11Apache 2.0.46max-age=3600
12Apache 2.0.46no-store, no-cache, must-revalidate, post-check=0, pre-check=0
13Apache 2.0.52no-cache, no-store, must-revalidate
14Apache 2.0.52no-store, no-cache, must-revalidate, post-check=0, pre-check=0, private
15Apache 2.0.54no-store, no-cache, must-revalidate, post-check=0, pre-check=0
16Apache 2.0.59no-cache,no-store,max-age=0
17Apache 2.2.3max-age=173
18Apache 2.2.3no-store, no-cache, must-revalidate, post-check=0, pre-check=0
19Apache 2.2.4private, must-revalidate, max-age=0
20Apache 2.2.6no-store, no-cache, must-revalidate
21Apache 2.2.8no-store, no-cache, must-revalidate, post-check=0, pre-check=0
22Barracuda Networks Spam Firewallno-cache,no-store
23Cherokee 0.6.0no-cache
24Cherokee 0.99no-cache
25Cisco VPN 3000 Concentrator Virata EmWeb R6.2.0no-cache
26Cougar 9.5.6001.6264max-age=0, no-cache
27FlexWATCH FW-3440-Bno-cache
28GlobalSCAPE Secure Server 3.3private
29Hiawatha 6.11no-store, no-cache, must-revalidate, post-check=0, pre-check=0
30Hiawatha 6.2no-store, no-cache, must-revalidate, post-check=0, pre-check=0
31IBM HTTP Server 6.0.2.19max-age=0, no-cache, no-store
32IBM HTTP Server 6.0.2.19no-cache
33IBM HTTP Server 6.1.0.19no-cache
34Jetty 6.1.1max-age=0, no-store
35KLone 2.1.0rc1no-cache, must-revalidate
36ListManagerWeb 8.8cmax-age=0
37LiteSpeed Web Server 3.3no-store, no-cache, must-revalidate
38Lotus Domino Go Webserver 4.6.2.5no-cache
39Microsoft IIS 5.0max-age=900
40Microsoft IIS 6.0max-age=0, no-cache, no-store
41Microsoft IIS 6.0no-cache
42Microsoft IIS 6.0no-cache, no-store, must-revalidate, post-check=0, pre-check=0
43Microsoft IIS 6.0private,max-age=0
44Microsoft IIS 7.0max-age=600
45Microsoft IIS 7.0no-cache
46Microsoft ISA Server 2006no-cache,max-age=0,must-revalidate
47Mongrel 1.0no-cache
48NetBotz 320 thttpd 2.25bno-cache,no-store
49NetBotz 420 thttpd 2.25bno-cache,no-store
50NetBotz 500 thttpd 2.25bno-cache,no-store
51OpenSA 1.0.5no-cache, no-store, must-revalidate
52Oracle Application Server 10g 10.1.2.0.2no-cache, max-age=0, must-revalidate, proxy-mustcheck
53Oracle Application Server 9i 9.0.3.1private
54PacketShaper httpd 1.00no-cache
55Resin 2.1.17no-cache
56Ricoh Aficio 1022 Web-Server 3.0no-cache
57Ricoh Aficio 1045 5.23 Web-Server 3.0no-cache
58Ricoh Aficio 1060 3.53.3 Web-Server 3.0no-cache
59Ricoh Aficio 6002 3.53.3 Web-Server 3.0no-cache
60SonicWALL CSM 3200 2.6.0.0no-cache
61Sun Java System Web Server 7.0public, max-age=1755
62Sun Java System Web Server 7.0public, max-age=1784
63Sun ONE Web Server 6.1max-age=600
64Sun ONE Web Server 6.1max-age=7698
65WallBotz 500 thttpd 2.25bno-cache,no-store
66Zope 2.10.4max-age=10
67Zope 2.5.0max-age=3600
68Zope 2.7.6max-age=3600, must-revalidate
69Zope 2.7.6no-store, no-cache, must-revalidate, post-check=0, pre-check=0
70Zope 2.8.4max-age=3600
71firecat 1.0.0 Betaprivate
72lighttpd 1.4.18must-revalidate, max-age=30
73lighttpd 1.4.18no-cache, must-revalidate, max-age=0
74lighttpd 1.4.19no-store, no-cache, must-revalidate, post-check=0, pre-check=0
75lighttpd 1.4.22no-store, no-cache, must-revalidate
76lighttpd 1.5.0no-cache
77nginx 0.5.32max-age=0, no-cache, no-store
78nginx 0.5.33no-cache, must-revalidate, max-age=0
79nginx 0.5.35no-store, no-cache, must-revalidate, post-check=0, pre-check=0
80nginx 0.6.16no-cache, must-revalidate, max-age=0
81nginx 0.6.20no-cache
82nginx 0.6.26no-cache
83thttpd 2.26no-cache,no-store
84webcamXP PRO 2006 2.16.456x BETAno-cache, must revalidate
85webcamXP PRO 2006 2.20.024no-cache, must revalidate
86webcamXP PRO 2006 2.37.144no-cache, must revalidate
87webcamXP PRO 2007 3.60.220no-cache, must revalidate
88webcamXP PRO 2007 3.72.440no-cache, must revalidate
89webcamXP PRO 2007 3.96.000 betano-cache, must revalidate

[back] [upload] [top]