Re: [Plugins-writers] favicon used for web server ID?

From: George A. Theall (theall@private)
Date: Fri Oct 14 2005 - 07:56:49 PDT


On Fri, Oct 14, 2005 at 07:40:08AM -0700, Jon Passki wrote:

> Without having to call an external program (such as md5sum or md5),
> would there be any way to grab a favicon.ico file from a web server
> and check it against a list of known favicon.ico files using NASL2?

NASL has functions for generating hashes; eg, MD5(), SHA1(). So pick one
and generate hashes for your known files. Then retrieve the file from
your target, generate its hash, and compare.

George
-- 
theall@private
_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Fri Oct 14 2005 - 07:57:25 PDT