httprecon project

advanced web server fingerprinting

"httprecon is a tool for advanced web server fingerprinting, likely to increase web server probes as the tool is examined and included into other tools." - Brent Huston, MSI State of Security

Test: wrong_method (TEST / HTTP/1.1)
Fingerprint: x-powered-by

Optional header which announces some additionally installed software packages.

	Implementation	X-powered-by
	Abyss 2.0.0.20 X2	PHP/5.2.0
	Abyss 2.4.0.3 X2	PHP/4.3.9
	Abyss 2.4.0.3 X2	PHP/5.1.2
	Abyss 2.4.0.3 X2	PHP/5.2.0
	Abyss 2.5.0.0 X1	PHP/5.2.4
	Abyss 2.5.0.0 X2	PHP/5.2.2
	Abyss 2.5.0.0 X2	PHP/5.2.4
	Abyss 2.5.0.0 X2	PHP/5.2.5
	Apache 1.3.26	PHP/4.1.2
	Apache 1.3.26	PHP/4.2.2
	Apache 1.3.26	PHP/4.3.11
	Apache 1.3.27	PHP/4.1.2
	Apache 1.3.33	PHP/4.3.8-9
	Apache 1.3.33	PHP/4.4.7
	Apache 1.3.33	PHP/5.2.4
	Apache 1.3.34	PHP/4.4.2
	Apache 1.3.34	PHP/4.4.4-8+etch4
	Apache 1.3.37	PHP/4.4.6
	Apache 1.3.37	PHP/5.2.1
	Apache 2.0.49	PHP/4.3.9
	Apache 2.0.51	PHP/4.3.10
	Apache 2.0.52	PHP/4.3.9
	Apache 2.0.52	PHP/4.4.1
	Apache 2.0.52	PHP/5.1.4
	Apache 2.0.53	PHP/4.3.10
	Apache 2.0.54	PHP/4.3.10-22
	Apache 2.0.54	PHP/4.4.0
	Apache 2.0.54	PHP/4.4.6
	Apache 2.0.54	PHP/4.4.7
	Apache 2.0.55	PHP/5.1.2
	Apache 2.0.58	PHP/5.1.5
	Apache 2.0.59	PHP/5.2.1
	Apache 2.0.59	PHP/5.2.4
	Apache 2.0.59	Zope (www.zope.org), Python (www.python.org)
	Apache 2.2.11	PHP/5.2.8
	Apache 2.2.3	PHP/4.4.4-8+etch4
	Apache 2.2.3	PHP/5.2.0-8+etch7
	Apache 2.2.3	PHP/5.2.3
	Apache 2.2.3	PHP/5.2.8-0.dotdeb.1
	Apache 2.2.4	PHP/4.4.4-9+lenny1
	Apache 2.2.4	PHP/5.1.6
	Apache 2.2.4	PHP/5.2.1RC3-dev
	Apache 2.2.4	PHP/5.2.2
	Apache 2.2.6	PHP/5.2.5
	Apache 2.2.8	PHP/5.2.5
	Microsoft IIS 5.0	ASP.NET
	Microsoft IIS 5.1	ASP.NET
	Microsoft IIS 6.0	ASP.NET
	Microsoft IIS 6.0	ASP.NET 2.0
	Microsoft IIS 7.0	ASP.NET
	OpenSA 1.0.4	PHP/4.2.2
	nginx 0.6.16	PHP/5.2.4

[back] [upload] [top]