312-50V9 · Question #471
How can telnet be used to fingerprint a web server?
The correct answer is A. telnet webserverAddress 80. Connecting to a web server on port 80 via Telnet and sending a HEAD or GET request reveals the server's HTTP response headers, which often include the server software and version.
Question
How can telnet be used to fingerprint a web server?
Options
- Atelnet webserverAddress 80
- Btelnet webserverAddress 80
- Ctelnet webserverAddress 80
- Dtelnet webserverAddress 80
How the community answered
(41 responses)- A88% (36)
- B7% (3)
- C2% (1)
- D2% (1)
Why each option
Connecting to a web server on port 80 via Telnet and sending a HEAD or GET request reveals the server's HTTP response headers, which often include the server software and version.
By running 'telnet webserverAddress 80' and then manually typing an HTTP request such as 'HEAD / HTTP/1.0', the response includes the 'Server:' header field that discloses the web server software, version number, and sometimes the OS. This banner-grabbing technique works because HTTP is a plaintext protocol and Telnet provides raw TCP access to any port. It is a foundational reconnaissance step in penetration testing and security assessments.
This choice is identical to A and does not represent a distinct technique.
This choice is identical to A and does not represent a distinct technique.
This choice is identical to A and does not represent a distinct technique.
Concept tested: Banner grabbing via Telnet on HTTP port 80
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server
Topics
Community Discussion
No community discussion yet for this question.