On Mon, 3 Dec 2001 [EMAIL PROTECTED] wrote: > I'm thinking of more or less the same functionality as (iirc) queso, > which will guess a machine's OS from looking at responses to various > interesting network packets.
I'd think that, even if they change/remove the Server: header that the other information in the headers (the formats used, and even which ones ar present) would be a good place to start) It's fairly easy to hide all of the standard information that appears in things like 404 pages, even unintentionally, just by having custom replacements for cosmetic reasons. Same goes for directory listings. And it'd be Wrong to check for certain well-known security holes (in apache/iis/etc themselves, or by asking php/known-bad scripts like the old nph-* ones/ones left by codered/etc) and see if they work, and if they know better than the headers wouldn't it ? the hatter
