httprecon project
advanced web server fingerprinting
"Marc Ruef developed a new tool to make fingerprinting of web servers much easier. While using different test cases the hard requirements of such an identification can be met much better and more precise." - Martin Rutishauser, OneConsult GmbH, Director Training and Research
Test: get_long (GET /aaa(...) HTTP/1.1)
Fingerprint: cache-control

Demands for the cache controlling by proxies and web browsers.

ImplementationCache-control
1AOLserver 3.4.2no-cache, must-revalidate, post-check=0, pre-check=0
2AOLserver 4.0.10max-age=0
3AOLserver 4.0.10no-cache, no-store, private, max-age=0
4AOLserver 4.0.10private, no-cache, no-cache="Set-Cookie", no-store,
must-revalidate, max-age=0, proxy-revalidate, no-transform
5Apache 1.3.33max-age=60
6Apache 1.3.33private
7Apache 1.3.37private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
8Apache 2.0.59no-cache,no-store,max-age=0
9Apache 2.2.3max-age=173
10Apache 2.2.3no-store, no-cache, must-revalidate, post-check=0, pre-check=0
11Apache 2.2.4no-cache, no-store, max-age=0, must-revalidate
12Apache 2.2.6no-store, no-cache, must-revalidate
13Barracuda Networks Spam Firewallno-cache,no-store
14Cherokee 0.6.0no-cache
15Cherokee 0.99no-cache
16Cisco VPN 3000 Concentrator Virata EmWeb R6.2.0no-cache
17Cougar 9.5.6001.6264max-age=0, no-cache
18FlexWATCH FW-3440-Bno-cache
19GlobalSCAPE Secure Server 3.3private
20Hiawatha 6.11no-store, no-cache, must-revalidate, post-check=0, pre-check=0
21IBM HTTP Server 6.0.2.19max-age=0, no-cache, no-store
22IBM HTTP Server 6.1.0.19no-cache
23Jetty 6.1.1max-age=0, no-store
24KLone 2.1.0rc1no-cache, must-revalidate
25ListManagerWeb 8.8cmax-age=0
26LiteSpeed Web Server 3.3no-store, no-cache, must-revalidate
27Lotus Domino Go Webserver 4.6.2.5no-cache
28Microsoft IIS 5.0max-age=900
29Microsoft IIS 6.0max-age=0, no-cache, no-store
30Microsoft ISA Server 2006no-cache,max-age=0,must-revalidate
31NetBotz 320 thttpd 2.25bno-cache,no-store
32NetBotz 420 thttpd 2.25bno-cache,no-store
33NetBotz 500 thttpd 2.25bno-cache,no-store
34Oracle Application Server 10g 10.1.2.0.2no-cache, max-age=0, must-revalidate, proxy-mustcheck
35Oracle Application Server 9i 9.0.3.1private
36PacketShaper httpd 1.00no-cache
37Ricoh Aficio 1022 Web-Server 3.0no-cache
38Ricoh Aficio 1045 5.23 Web-Server 3.0no-cache
39Ricoh Aficio 1060 3.53.3 Web-Server 3.0no-cache
40Ricoh Aficio 6002 3.53.3 Web-Server 3.0no-cache
41Sun Java System Web Server 7.0public, max-age=1780
42Sun Java System Web Server 7.0public, max-age=1800
43Sun ONE Web Server 6.1max-age=7699
44WallBotz 500 thttpd 2.25bno-cache,no-store
45Zope 2.10.4max-age=10
46Zope 2.5.0max-age=3600
47Zope 2.7.6no-store, no-cache, must-revalidate, post-check=0, pre-check=0
48Zope 2.8.4max-age=3600
49and-httpd 0.99.11max-age=691200
50firecat 1.0.0 Betaprivate
51lighttpd 1.4.22no-store, no-cache, must-revalidate
52lighttpd 1.5.0no-cache
53nginx 0.5.32max-age=0, no-cache, no-store
54nginx 0.6.20no-cache
55thttpd 2.26no-cache,no-store
56webcamXP PRO 2006 2.16.456x BETAno-cache, must revalidate
57webcamXP PRO 2006 2.20.024no-cache, must revalidate
58webcamXP PRO 2006 2.37.144no-cache, must revalidate
59webcamXP PRO 2007 3.60.220no-cache, must revalidate
60webcamXP PRO 2007 3.72.440no-cache, must revalidate
61webcamXP PRO 2007 3.96.000 betano-cache, must revalidate

[back] [upload] [top]