14 May 2008 | 7,305 views

browserrecon – Passive Browser Fingerprinting

Check For Vulnerabilities with Acunetix

Most of todays tools for fingerprinting are focusing on server-side services. Well-known and widely-accepted implementations of such utilities are available for http web services, smtp mail server, ftp servers and even telnet daemons. Of course, many attack scenarios are focusing on server-side attacks.

Client-based attacks, especially targeting web clients, are becoming more and more popular. Browser-targeted attacks, drive-by pharming and web-based phishing provide a broad aspect of threats during surfing in the world wide web. Attacker might initialize and optimize their attacks by fingerprinting the target application to find the best possible way to compromise the client.

The browserrecon project is going to prove, that client-side fingerprinting is possible and useful too. In this particular implementation, currently available in php only, the given web browser is identified by the used http requests. Similar to the http fingerprinting provided within httprecon the header lines and values are analyzed and compared to a fingerprint database.

The current release of browserrecon is written in PHP. Therefore, you might be able to use browserrecon on a web server supporting PHP. If you want to include browserrecon in a given web application, the software has to support PHP itself or a fork of the PHP scripts.

You can download browserrecon here:

browserrecon-1.0-php.tar.gz

Or read more here.



Recent in General Hacking:
- Kali Linux – The Most Advanced Penetration Testing Linux Distribution
- Microsoft Says You SHOULD Re-use Passwords Across Sites
- Dradis v2.9 – Information Sharing For Security Assessments

Related Posts:
- p0f – Advanced Passive OS Fingerprinting Tool
- SinFP – Next Generation OS Detection Tool
- Xprobe2 – Active OS Fingerprinting Tool

Most Read in General Hacking:
- 10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery) - 1,140,936 views
- Hack Tools/Exploits - 585,205 views
- Password Cracking with Rainbowcrack and Rainbow Tables - 416,251 views

Low-cost VPS Hosting

One Response to “browserrecon – Passive Browser Fingerprinting”

  1. Jinesh 19 May 2008 at 1:43 pm Permalink

    Gosh!!! got to change my bank password more often now.