Banner Grabber

Aus xinux.net
Zur Navigation springen Zur Suche springen

telnet

Apache

  • telnet 192.168.240.69 80
Trying 192.168.240.69...
Connected to 192.168.240.69.
Escape character is '^]'.
  • GET / HTTP/1.1
  • RETURN
  • RETURN
HTTP/1.1 400 Bad Request
Date: Mon, 15 Aug 2016 13:02:19 GMT
Server: Apache/2.4.7 (Ubuntu)
Content-Length: 308
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
<hr>
<address>Apache/2.4.7 (Ubuntu) Server at scorpia.xinux.org Port 80</address>
</body></html>
Connection closed by foreign host.

IIS

  • telnet 192.168.242.75 80
Trying 192.168.242.75...
Connected to 192.168.242.75.
Escape character is '^]'.
  • GET / HTTP/1.1
  • RETURN
  • RETURN
HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 16 Aug 2016 13:02:03 GMT
Connection: close
Content-Length: 334

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Bad Request</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Bad Request - Invalid Hostname</h2>
<hr><p>HTTP Error 400. The request hostname is invalid.</p>
</BODY></HTML>
Connection closed by foreign host.

netcat

  • echo -e "GET / HTTP/1.1\n\n" | nc 10.0.10.103 80 | grep Server
Server: Apache/2.4.7 (Ubuntu)
<address>Apache/2.4.7 (Ubuntu) Server at scorpia.xinux.org Port 80</address>

Bannergrabbing mit NMAP

  • nmap -sV -p 21 --script=banner 10.1.1.1
Starting Nmap 7.60 ( https://nmap.org ) at 2017-11-13 18:16 CET
Nmap scan report for 10.1.1.1
Host is up (0.00028s latency).

PORT   STATE SERVICE VERSION
21/tcp open  ftp     vsftpd 3.0.3
|_banner: 220 (vsFTPd 3.0.3)
MAC Address: 2A:2F:02:20:DA:5E (Unknown)
Service Info: OS: Unix

Bannergrabbing auf Linux

Alternativ kann auch das Bannergrabbing-Tool "p0f" verwendet werden, dass jedoch nur für Linux-Systeme zur Verfügung steht

Install

  • apt install p0f

Lua Skript