Re: http fingerprinting

From: Richard Moore (richat_private)
Date: Wed Apr 09 2003 - 03:09:48 PDT

  • Next message: Christophe BRIGUET: "Plugin for tcp/1034 authentication port in Checkpoint Fw-1"

    Looking at the way the code works, it seems it won't detect an IIS 5.0 
    box that has the DisableWebDAV registry tweak. The headers for such a
    machine are as follows:
    
    OPTIONS * HTTP/1.1
    Host: aristotle
    
    HTTP/1.1 200 OK
    Server: Microsoft-IIS/5.0
    Date: Wed, 09 Apr 2003 10:07:46 GMT
    Public: OPTIONS, TRACE, GET, HEAD, POST
    Content-Length: 0
    
    Cheers
    
    Rich.
    



    This archive was generated by hypermail 2b30 : Wed Apr 09 2003 - 03:10:12 PDT