httprecon project
advanced web server fingerprinting
Introduction | News | Scan | Download | Documentation | FAQ | Database | Contact
"It's a great tool." - Thor, an httprecon user
Test: get_nonexisting (GET /404test.html HTTP/1.1)
Fingerprint: vary-order

Set of request-header fields that fully determines if a cache is permitted to use the response.

ImplementationVary-order
1AOLserver 4.0.10Accept-Encoding
2Apache 1.3.26negotiate,accept-language
3Apache 1.3.33Accept-Encoding
4Apache 1.3.34Accept-Encoding
5Apache 1.3.37*
6Apache 2.0.52Accept-Encoding,User-Agent
7Apache 2.0.53accept-language,accept-charset
8Apache 2.0.54Accept-Encoding
9Apache 2.0.54accept-language,accept-charset
10Apache 2.0.55Accept-Encoding
11Apache 2.0.59accept-language,accept-charset
12Apache 2.0.63User-Agent,Accept-Encoding
13Apache 2.2.11Accept-Encoding
14Apache 2.2.2Accept-Encoding
15Apache 2.2.2accept-language,accept-charset
16Apache 2.2.3accept-language,accept-charset
17Apache 2.2.4Accept-Encoding,Cookie,User-Agent
18Apache 2.2.4User-Agent
19Apache 2.2.6accept-language,accept-charset
20Apache 2.3.0Accept-Encoding
21BaseHTTPServer 0.3Host
22Compaq HTTP Server 9.9negotiate,accept-language
23Microsoft IIS 6.0Accept-Encoding
24Microsoft IIS 6.0Accept-Encoding,User-Agent
25Mongrel 1.0Accept-Encoding
26Oracle Application Server 10g 10.1.2.2.0Host
27Oracle Application Server 10g 10.1.3.1.0accept-language
28Roxen 4.5.145*
29Zeus 4.3Accept-Encoding
30Zeus 4.41*
31Zope 2.10.4Accept-Encoding
32Zope 2.7.6Cookie
33Zope 2.8.4Accept-Encoding
34Zope 2.8.6Accept-Encoding
35Zope 2.9.6Accept-Encoding
36Zope 2.9.6Accept-Encoding,User-Agent
37and-httpd 0.99.11Accept,Accept-Encoding,Accept-Language
38lighttpd 1.4.18Accept-Encoding,Cookie
39lighttpd 1.4.19Accept-Encoding,User-Agent
40nginx 0.5.33Accept-Encoding
41nginx 0.6.20Accept-Language
42nginx 0.7.35Accept-Encoding,User-Agent

[back] [upload] [top]
© 2007-2025 by Marc Ruef