[svlug] [offtopic] OS identyfying

[Karen Shaeffer]

On Mon, Jul 03, 2000 at 07:10:52PM -0700, Steve M Bibayoff wrote:
> The other day I was trying to show someone how Linux is running most
> things on the web by going to netcraft and Don Marti's wtf site. When he
> entered 'www.microsoft.com' he got a different OS every time he entered
> except Win2000. I thought this might not be right considering M$ claims
> their whole company only uses Win200o now and I would at least think their
> web servers would at least be running it.
> 
> My question is, I am partially familar w/ how you are able to identify a
> web server( sending a few semi-bad packets?), but how could you fake what
> you are actually running?
> 
> Steve

Hi Steve,

Spend a little time here...

http://www.insecure.org/nmap/nmap-fingerprinting-article.html

But, if you just want to casually ID web servers, then just use wget
and save the server responses. Or, even more fun, write a little program
to id web servers...

Hope that helps.

c,
-- 
 Karen Shaeffer
 Neuralscape; Santa Cruz, Ca. 95060
 shaeffer at neuralscape.com  http://www.neuralscape.com