312-50V10 · Question #582
How can telnet be used to fingerprint a web server?
The correct answer is A. telnet webserverAddress 80. Connecting to port 80 via telnet and sending a raw HTTP request forces the server to return response headers that reveal its software name and version.
Question
How can telnet be used to fingerprint a web server?
Options
- Atelnet webserverAddress 80
- Btelnet webserverAddress 80
- Ctelnet webserverAddress 80
- Dtelnet webserverAddress 80
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- D3% (1)
Why each option
Connecting to port 80 via telnet and sending a raw HTTP request forces the server to return response headers that reveal its software name and version.
Running 'telnet webserverAddress 80' establishes a raw TCP connection to the HTTP service, after which a manual request such as 'HEAD / HTTP/1.0' can be typed and submitted. The server responds with headers including the 'Server:' field, which discloses the web server software and version - a technique called banner grabbing. This works because HTTP/1.x is a plain-text protocol with no encryption requirement, making the banner readable without any special tools.
This choice is textually identical to the correct answer as presented; no distinct technical differentiation can be drawn from the question as written.
This choice is textually identical to the correct answer as presented; no distinct technical differentiation can be drawn from the question as written.
This choice is textually identical to the correct answer as presented; no distinct technical differentiation can be drawn from the question as written.
Concept tested: Web server banner grabbing via telnet on port 80
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server
Topics
Community Discussion
No community discussion yet for this question.