[ubuntu-za] Identifying web server software from my Ubuntu 8.04

[Russell Cloran]

Hi,

On Wed, Nov 5, 2008 at 9:36 AM, Alf Stockton <alf at stockton.co.za> wrote:
> Short of installing nessus, for a possible one off operation, is there an easy
> way of identifying what OS & web server a remote site is using?

Most webservers will tell you what software they run in the headers.
You can use a number of methods to find the headers. Here's three
examples:

russell at stratus:~$ telnet www.iol.co.za 80
Trying 196.30.168.79...
Connected to www.iol.co.za.
Escape character is '^]'.
HEAD / HTTP/1.1
Host: www.iol.co.za

HTTP/1.1 200 OK
Date: Wed, 05 Nov 2008 07:36:42 GMT
Server: Apache/1.3.37 (Unix) mod_gzip/1.3.26.1a PHP/4.4.7
mod_ssl/2.8.28 OpenSSL/0.9.8d
Cache-Control: no-cache, must-revalidate
Expires: Wed, Nov 05 2008 09:51:46 GMT
X-Powered-By: PHP/4.4.7
Pragma: no-cache
Content-Type: text/html

russell at stratus:~$ curl -I http://www.iol.co.za/
HTTP/1.1 200 OK
Date: Wed, 05 Nov 2008 07:38:31 GMT
Server: Apache/1.3.37 (Unix) mod_gzip/1.3.26.1a PHP/4.4.7
mod_ssl/2.8.28 OpenSSL/0.9.8d
Cache-Control: no-cache, must-revalidate
Expires: Wed, Nov 05 2008 09:53:31 GMT
X-Powered-By: PHP/4.4.7
Pragma: no-cache
Content-Type: text/html

russell at stratus:~$ wget -O /dev/null -S http://www.iol.co.za/
--09:42:27--  http://www.iol.co.za/
          => `/dev/null'
Resolving www.iol.co.za... 196.30.168.79
Connecting to www.iol.co.za|196.30.168.79|:80... connected.
HTTP request sent, awaiting response...
 HTTP/1.1 200 OK
 Date: Wed, 05 Nov 2008 07:41:32 GMT
 Server: Apache/1.3.37 (Unix) mod_gzip/1.3.26.1a PHP/4.4.7
mod_ssl/2.8.28 OpenSSL/0.9.8d
 Vary: Accept-Encoding
 Cache-Control: no-cache, must-revalidate
 Expires: Wed, Nov 05 2008 09:56:32 GMT
 X-Powered-By: PHP/4.4.7
 Pragma: no-cache
 Connection: close
 Content-Type: text/html
Length: unspecified [text/html]


As for finding out the operating system, Netcraft (as suggested), or
use nmap (note: considered anti-social).

russell at stratus:~$ sudo nmap -O www

...
MAC Address: 00:16:3E:51:45:38 (Xensource)
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.17 - 2.6.20
Uptime: 1.978 days (since Mon Nov  3 10:17:01 2008)

HTH,

Russell
-- 
echo http://russell.rucus.net/spam/ |  sed 's,t/.*,t,;P;s,.*//,,;s,\.,@,;'