GSLC · Question #261
You work as a professional Ethical Hacker. You are assigned a project to perform blackbox retrieve information about the Webserver being used by we-are-secure. Which of the following tools can you…
The correct answer is C. httprint. httprint is a web server fingerprinting tool used in black-box testing to identify the web server software and version without internal access to the target system.
Question
You work as a professional Ethical Hacker. You are assigned a project to perform blackbox retrieve information about the Webserver being used by we-are-secure. Which of the following tools can you use to accomplish the task?
Options
- AWhisker
- BWinSSLMiM
- Chttprint
- DWget
How the community answered
(61 responses)- A7% (4)
- B2% (1)
- C89% (54)
- D3% (2)
Why each option
httprint is a web server fingerprinting tool used in black-box testing to identify the web server software and version without internal access to the target system.
Whisker is a CGI vulnerability scanner used to enumerate and test CGI scripts for weaknesses, not a tool for identifying web server software.
WinSSLMiM is a Windows-based SSL man-in-the-middle attack tool used to intercept encrypted traffic, not a web server fingerprinting utility.
httprint performs web server fingerprinting by analyzing HTTP response headers, banner information, and behavioral patterns to determine the web server type and version (e.g., Apache, IIS) running on the target. It is purpose-built for black-box reconnaissance, allowing an ethical hacker to gather server intelligence from the outside. This makes it the correct choice for identifying the web server used by a target organization.
Wget is a command-line utility for downloading files from web servers using HTTP, HTTPS, and FTP - it does not fingerprint or identify web server software.
Concept tested: Web server fingerprinting tools in black-box testing
Source: https://net-square.com/httprint.html
Topics
Community Discussion
No community discussion yet for this question.