nerdexam
GIAC

GSLC · Question #261

You work as a professional Ethical Hacker. You are assigned a project to perform blackbox retrieve information about the Webserver being used by we-are-secure. Which of the following tools can you…

The correct answer is C. httprint. httprint is a web server fingerprinting tool used in black-box testing to identify the web server software and version without internal access to the target system.

Security Architecture & Engineering

Question

You work as a professional Ethical Hacker. You are assigned a project to perform blackbox retrieve information about the Webserver being used by we-are-secure. Which of the following tools can you use to accomplish the task?

Options

  • AWhisker
  • BWinSSLMiM
  • Chttprint
  • DWget

How the community answered

(61 responses)
  • A
    7% (4)
  • B
    2% (1)
  • C
    89% (54)
  • D
    3% (2)

Why each option

httprint is a web server fingerprinting tool used in black-box testing to identify the web server software and version without internal access to the target system.

AWhisker

Whisker is a CGI vulnerability scanner used to enumerate and test CGI scripts for weaknesses, not a tool for identifying web server software.

BWinSSLMiM

WinSSLMiM is a Windows-based SSL man-in-the-middle attack tool used to intercept encrypted traffic, not a web server fingerprinting utility.

ChttprintCorrect

httprint performs web server fingerprinting by analyzing HTTP response headers, banner information, and behavioral patterns to determine the web server type and version (e.g., Apache, IIS) running on the target. It is purpose-built for black-box reconnaissance, allowing an ethical hacker to gather server intelligence from the outside. This makes it the correct choice for identifying the web server used by a target organization.

DWget

Wget is a command-line utility for downloading files from web servers using HTTP, HTTPS, and FTP - it does not fingerprint or identify web server software.

Concept tested: Web server fingerprinting tools in black-box testing

Source: https://net-square.com/httprint.html

Topics

#web server fingerprinting#blackbox testing#httprint#ethical hacking

Community Discussion

No community discussion yet for this question.

Full GSLC Practice