M E T A E Y E SG

[ Archive for May, 2007 ]

•  Fingerprinting web servers with a %00.

The %00 is the famous null character when encoded in a URL. It is interesting to see how
different web servers behave when a null character is there in the GET request.

I use a simple python program that accepts the website name and URL to get, responds with the
web server version if available in the header and HTTP response code.

% ./uget.py
usage: ./uget.py <website name> <url>

continued…



[ © MSG ]