[lug] possible intrusion

Sean Reifschneider jafo-nclug at tummy.com
Thu Jul 19 17:14:28 MDT 2001


On Thu, Jul 19, 2001 at 02:13:52PM -0600, D. Stimits wrote:
>wherever.com 80, which gets you to the web server. Type:
>GET
><hit enter key>

That requests an HTTP 0.9 response which doesn't usually include the server
information.  Try:

   telnet example.com 80
   HEAD / HTTP/1.0<enter>
   <enter>

You should see something like:

   HTTP/1.1 200 OK
   Date: Thu, 19 Jul 2001 23:12:45 GMT
   Server: Apache/1.3.19 (Unix)  (Red-Hat/Linux) mod_ssl/2.8.1
   OpenSSL/0.9.6 DAV/1.0.2 PHP/4.0.4pl1 mod_perl/1.24_01
   Connection: close
   Content-Type: text/html

which indicates that my laptop is running Apache.

Sean
-- 
 No man has a natural right to commit aggression on the equal rights of
 another, and this is all from which the laws ought to restrain him. -- T.J.
Sean Reifschneider, Inimitably Superfluous <jafo at tummy.com>
tummy.com - Linux Consulting since 1995. Qmail, KRUD, Firewalls, Python



More information about the LUG mailing list