Mailing List Archive

modify http_version for urlscan
on IIS is probably easier to change the reported version than any other
server.

patch enclosed to reflect this information.
http_version.patch.txt

--
Michael Scheidell, CEO
SECNAP Network Security, LLC
Sales: 866-SECNAPNET / (1-866-732-6276)
Main: 561-368-9561 / www.secnap.net
Looking for a career in Internet security?
http://www.secnap.net/employment/
Re: modify http_version for urlscan [ In reply to ]
I started on a new plugin which does web server fingerprinting, so people
who enable dependencies won't miss IIS vulns on a server which has
changed its banner. Currently it detects IIS and Apache pretty well, its
all the wierd little servers that are going to be a pain.

On Sunday 15 September 2002 10:44 am, Michael Scheidell wrote:
> on IIS is probably easier to change the reported version than any other
> server.