312-50V12 · Question #301
What would be the purpose of running "wget 192.168.0.15 -q -S" against a web server?
The correct answer is B. Using wget to perform banner grabbing on the webserver. The wget command with the -q and -S flags is used to perform banner grabbing by retrieving and displaying HTTP server response headers without downloading the page content.
Question
Options
- APerforming content enumeration on the web server to discover hidden folders
- BUsing wget to perform banner grabbing on the webserver
- CFlooding the web server with requests to perform a DoS attack
- DDownloading all the contents of the web page locally for further examination
How the community answered
(64 responses)- A2% (1)
- B91% (58)
- C5% (3)
- D3% (2)
Why each option
The `wget` command with the `-q` and `-S` flags is used to perform banner grabbing by retrieving and displaying HTTP server response headers without downloading the page content.
The command does not include options for recursive scanning or directory bruteforcing, which are required for content enumeration or discovering hidden folders.
The `-S` (or `--server-response`) option instructs `wget` to print HTTP response headers, which frequently contain the server's banner information such as the web server software and version. The `-q` (or `--quiet`) option suppresses all other output, making it ideal for retrieving only these headers for banner grabbing without downloading the full page.
A single `wget` command makes only one or a few requests and does not generate enough traffic to flood a web server and perform a Denial-of-Service attack.
The `-q` and `-S` options are used to suppress the download and display of the actual web page content, instead focusing on retrieving and printing the server's response headers.
Concept tested: `wget` command options for banner grabbing
Source: https://www.gnu.org/software/wget/manual/wget.html
Topics
Community Discussion
No community discussion yet for this question.