Not to mention 'simple' masking - I've seen people use aspx as an extension
for their php apps and vice versa just to throw off fingerprinting attempts.

Also check the returned headers.

Depending on what you are trying to do you get usually get some good info
there

example (www.php.net)
Date

Sun, 18 Jan 2009 00:45:10 GMT

Server

Apache/1.3.41 (Unix) PHP/5.2.1

X-Powered-By

PHP/5.2.1

Last-Modified

Sun, 18 Jan 2009 00:47:45 GMT

Content-Language

en

Content-Type

text/html;charset=utf-8


www.microsoft.com











Server

Microsoft-IIS/7.0

X-AspNet-Version

2.0.50727








Cheers,

Matt



>
> On 17/01/2009, at 10:30 PM, Michael wrote:
>
> > htm
> > php
> > php3
> > asp
> > aspx
> > html
> > cfm
> > xhtml
> > xhtm
> jsp
> php4
> php5
> "nothing"
> xml
> jhtml
> cgi
> phtml
> rss
> mspx
>
> There's heaps more though. Nowdays, with .htaccess files, anything goes.
> --
> http://yomcat.geek.nz
>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
NZ PHP Users Group: http://groups.google.com/group/nzphpug
To post, send email to [email protected]
To unsubscribe, send email to
[email protected]
-~----------~----~----~----~------~----~------~--~---

Reply via email to