Httprint (hack - fingerprinting tool)

  

Introduction
httprint is a web server fingerprinting tool. It relies on web server characteristics to accurately identify web servers, despite the fact that they may have been obfuscated by changing the server banner strings, or by plug-ins such as mod_security or servermask. httprint can also be used to detect web enabled devices which do not have a server banner string, such as wireless access points, routers, switches, cable modems, etc. httprint uses text signature strings and it is very easy to add signatures to the signature
database.
More details on how httprint works can be found in the Introduction to HTTP fingerprinting paper. It is printer-friendly.
 
Features

  • Identification of web servers despite the banner string and any other obfuscation. httprint can successfully identify the underlying web servers when their headers are mangled by either patching the binary, by modules such as mod_security.c or by commercial products such as ServerMask. 
  • Inventorying of web enabled devices such as printers, routers, switches, wireless access points, etc. 
  • Customisable web server signature database. To add new signatures, simply cut and paste the httprint output against unknown servers into the signatures text file.
  • Confidence Ratings. httprint now picks the best matches based on confidence ratings, derived using a fuzzy logic technique, instead of going by the highest weight. 
  • [new] Multi-threaded engine. httprint v301 is a complete re-write, featuring a multi-threaded scanner, to process multiple hosts in parallel. This greatly saves scanning time. *multi-threading is not yet supported in the FreeBSD version.
  • [new] SSL information gathering. httprint now gathers SSL certificate information, which helps you identify expired SSL certificates, ciphers used, certificate issuer, and other such SSL related details.
  • [new] Automatic SSL detection. httprint can detect if a port is SSL enabled or not, and can automatically switch to SSL connections when needed.
  • Automatic traversal of HTTP 301 and 302 redirects. Many servers who have transferred their content to other servers send a default redirect response towards all HTTP requests. httprint now follows the redirection and fingerprints the new server pointed to. This feature is enabled by default and can be turned off, if needed.
  • Ability to import web servers from nmap network scans. httprint can import nmap's xml output files.
  • Reports in HTML, CSV and XML formats.
  • Available on Linux, Mac OS X, FreeBSD (command line only) and Win32 (command line and GUI)
click to download

Comments

Post a Comment

Popular posts from this blog

How to Install Android OS in Your Computer?

Image
We all know about Google Android operating system which comes installed in almost all latest smartphones whether its Samsung Galaxy S5 or Google Nexus. You'll find Android OS in almost all latest touch-enabled mobile phones. It has become the most popular operating system for mobile phones and tablets. Did you know you can install or test Google Android OS in your PC? People who don't have an Android mobile phone but want to test Android OS in their Desktop computer or laptop, will definitely find this article useful. If you remember, we have shared a software " BlueStacks " in past which works like an Android emulator and allows you to install and run almost all Google Android apps on your Windows PC. But it doesn't provide a full experience of Google Android OS. Today in this topic, we are going to share a fully functional Google Android OS copy which can be installed in your PC and can be used as a primary operating system. And if you don'
Read more

Google Dork For "Remote File Inclusion"

Image
Google dork s are the center of the Google Hacking. Many hackers use google to find vulnerable webpages and later use these vulnerabilities for hacking. Remote File Inclusion (RFI) is a type of vulnerability most often found on websites. It allows an attacker to include a remote file, usually through a script on the web server. The vulnerability occurs due to the use of user-supplied input without proper validation. List Of Google Dork For Remote File Inclusion: inurl:rte/my_documents/my_files inurl:/my_documents/my_files/ inurl:/shoutbox/expanded.php?conf= inurl:/main.php?x= inurl:/myPHPCalendar/admin.php?cal_dir= inurl:/index.php/main.php?x= inurl:/index.php?include= inurl:/index.php?x= inurl:/index.php?open= inurl:/index.php?visualizar= inurl:/template.php?pagina= inurl:/index.php?pagina= inurl:/index.php?inc= inurl:"index.php?page=contact.php" inurl:"template.php?goto=" inurl:"video.php?content=" inurl:"pages.php?p
Read more

Colasoft MAC Scanner (hack tools)

Image
 Colasoft MAC Scanner allows to scan the network and get a list of MAC addresses along with IP address, machine name, and manufacturer's information. It can automatically detect all subnets according to the IP addresses configured on multiple NICs of a machine. It supports multi-threaded scanning.  Click to download
Read more