From the course: Penetration Testing Essential Training

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Fingerprint web servers

Fingerprint web servers

- [Instructor] Fingerprinting is an important first step in testing a web application, as the environment in which it operates is as important as the application itself, in terms of potential application risk. While some servers provide banners, others have their banners removed or modified. Being able to determine the type of server from its characteristics is important when reading the banner proves futile. There are a number of tools available for fingerprinting a web server. One of them is httprecon. httprecon can be downloaded from the Computec website as a zip file containing the Window's binaries. I've downloaded it into my Windows system, into the httprecon folder. There are three OCX files that come with httprecon. These may be missing in Windows. They need to be in the SysWOW64 folder and registered. We have to be running an administrative command shell for this. I'll now run the privilege registration process for all three. Okay, that was successful. As was that. And that…

Contents