{"id":765,"date":"2008-03-26T08:25:43","date_gmt":"2008-03-26T08:25:43","guid":{"rendered":"https:\/\/www.darknet.org.uk\/2008\/03\/httprecon-advanced-web-server-fingerprinting\/"},"modified":"2019-09-06T23:37:39","modified_gmt":"2019-09-06T15:37:39","slug":"httprecon-advanced-web-server-fingerprinting","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2008\/03\/httprecon-advanced-web-server-fingerprinting\/","title":{"rendered":"httprecon &#8211; Advanced Web Server Fingerprinting"},"content":{"rendered":"<p>httprecon is a tool for advanced web server fingerprinting, similar to <a href=\"https:\/\/www.darknet.org.uk\/2007\/09\/httprint-v301-web-server-fingerprinting-tool-download\/\">httprint<\/a> that we mentioned previously.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2008\/03\/httprecon-Advanced-Web-Server-Fingerprinting-640x530.png\" alt=\"httprecon - Advanced Web Server Fingerprinting\" width=\"640\" height=\"530\" class=\"aligncenter size-medium wp-image-5293\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>The httprecon project is doing some research in the field of web server fingerprinting, also known as http fingerprinting. The goal is the highly accurate identification of given httpd implementations. This is very important within professional vulnerability analysis.<\/p>\n<p>Besides the discussion of different approaches and the documentation of gathered results also an implementation for automated analysis is provided. This software shall improve the easiness and efficiency of this kind of enumeration. Traditional approaches as like banner-grabbing, status code enumeration and header ordering analysis are used. However, many other analysis techniques were introduced to increase the possibilities of accurate web server fingerprinting.<\/p>\n<p>Besides the well-known enumeration of http response status codes and header-ordering several other fingerprinting mechanisms were introduced. For example the capitalization of header lines, the use of spaces and the structure of ETag values (e.g. length and quotes).<\/p>\n<h2>Features of httprecon &#8211; Advanced Web Server Fingerprinting tool<\/h2>\n<p>These are the main features of the current implementation of httprecon which makes this solution better than other tools of this kind:<\/p>\n<ul>\n<li>Many test-cases: There are nine test-cases possible<\/li>\n<li>HTTPS\/SSL support: Secure web servers can be tested too<\/li>\n<li>Advanced result analysis: Different methods for the analysis of results is provided<\/li>\n<li>Many fingerprint details: The analysis is based on many fingerprint elements<\/li>\n<li>Plaintext Database: The fingerprint data is saved in a file-based plaintext database<\/li>\n<li>Fingerprint Wizard: Fingerprints can be saved and updated within the GUI<\/li>\n<li>IDS evasion mechanism: The configuration settings allow to use IDS evasion mechanisms<\/li>\n<li>Reporting: XML, HTML and TXT reporting is provided for professional testers<\/li>\n<li>Autoupdate: An autoupdate feature informs about new releases<\/li>\n<li>Open-source (GPLv3): Everyone can improve the application for themselves<\/li>\n<\/ul>\n<p>This increases the number of fingerprints to distinguish the given implementation. Thus, the accuracy of the fingerprinting series is very high. Theoretically, httprecon 1.x is able to generate approx. 198 fingerprint atoms per full scan run (usually between 80 and 120 are given). <\/p>\n<p>You can download httprecon 7.3 here:<\/p>\n<p>Source (VB6) &#8211; <a href=\"https:\/\/github.com\/scipag\/httprecon-win32\/releases\/download\/7.3\/httprecon-7.3.zip\">httprecon-7.3.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/scipag\/httprecon-win32\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>httprecon is a tool for advanced web server fingerprinting, similar to httprint that we mentioned previously. The httprecon project is doing some research in the field of web server fingerprinting, also known as http fingerprinting. The goal is the highly accurate identification of given httpd implementations. This is very important within professional vulnerability analysis. Besides [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"httprecon - Advanced Web Server Fingerprinting","_seopress_titles_desc":"httprecon is a tool for advanced web server fingerprinting,  it uses the enumeration of http response status codes, header-ordering and several other methods.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9],"tags":[],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/765"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=765"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/765\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}