312-50V11 · Question #582
How can telnet be used to fingerprint a web server?
The correct answer is A. telnet webserverAddress 80. Telnet can connect to a web server on port 80 and send raw HTTP requests; the server response headers reveal software and version details used for fingerprinting.
Question
How can telnet be used to fingerprint a web server?
Options
- Atelnet webserverAddress 80
- Btelnet webserverAddress 80
- Ctelnet webserverAddress 80
- Dtelnet webserverAddress 80
How the community answered
(45 responses)- A89% (40)
- B7% (3)
- C2% (1)
- D2% (1)
Why each option
Telnet can connect to a web server on port 80 and send raw HTTP requests; the server response headers reveal software and version details used for fingerprinting.
Running 'telnet webserverAddress 80' opens a raw TCP session to the HTTP port, after which the tester can type a command such as 'HEAD / HTTP/1.0' and press Enter twice; the Server response header returned by the web server discloses the software name and version, enabling passive fingerprinting without specialized tools.
Choice B is textually identical to A and is marked incorrect only because the question designates A as the single correct answer despite all options being the same.
Choice C is textually identical to A and is marked incorrect only because the question designates A as the single correct answer despite all options being the same.
Choice D is textually identical to A and is marked incorrect only because the question designates A as the single correct answer despite all options being the same.
Concept tested: Web server fingerprinting via telnet banner grabbing
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server
Topics
Community Discussion
No community discussion yet for this question.