Reading time: 35 – 58 minutes
Com a simple curiositat m’he dedicat a capturar el q els nostres navegadors
envien quan ens connectem a una pàgina web. D’aquesta forma ens podem
adonar com l’implementació d’un estàndard varia molt segons el
programador.
Per tal de fer aquesta prova únicament m’he dedicat a simular un
servidor HTTP (nc -l p 8000) al port 8000 i fer-hi connectar diferents
navegadors, els resultats són aquests:
Lynx 2.8.3:
GET / HTTP/1.0<br>Host: localhost:8000<br>Accept: text/html, text/plain, text/sgml, */*<br>Accept-Encoding: gzip, compress<br>Accept-Language: en<br>User-Agent: Lynx/2.8.3rel.1 libwww-FM/2.14Netscape 6.1:
GET / HTTP/1.1<br>Host: 192.168.1.1:8000<br>User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.2)<br>Gecko/20010726 Netscape6/6.1<br>Accept: text/xml, application/xml, application/xhtml+xml, text/html;q=0.9,<br>image/png, image/jpeg, image/gif;q=0.2, text/plain;q=0.8, text/css,<br>*/*;q=0.1<br>Accept-Language: en-us<br>Accept-Encoding: gzip,deflate,compress,identity<br>Accept-Charset: ISO-8859-1, utf-8;q=0.66, *;q=0.66<br>Keep-Alive: 300<br>Connection: keep-aliveMozilla 0.9.3:
GET / HTTP/1.1<br>Host: 192.168.1.1:8000<br>User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.3)<br>Gecko/20010801<br>Accept: text/xml, application/xml, application/xhtml+xml, text/html;q=0.9,<br>image/png, image/jpeg, image/gif;q=0.2, text/plain;q=0.8, text/css,<br>*/*;q=0.1<br>Accept-Language: en-us<br>Accept-Encoding: gzip, deflate, compress;q=0.9<br>Accept-Charset: ISO-8859-1, utf-8;q=0.66, *;q=0.66<br>Keep-Alive: 300<br>Connection: keep-aliveInternet Explorer 5.5:
GET / HTTP/1.1<br>Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,<br>application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword,<br>*/*<br>Accept-Language: es<br>Accept-Encoding: gzip, deflate<br>User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)<br>Host: 192.168.1.1:8000<br>Connection: Keep-Alive<br>Cookie: cookie_test=1
1 thought on “Browser fingerprinting”
He trobat un document que es diu:
Fingerprinting Port 80 Attacks: A look into web server, and web
application attack signatures.”
com que fa temps vaig escriure aquest article he pensat q estaria bé,
posar aquesta referència aquí. Si algú se’l vol llegir
esta a:
http://www.cgisecurity.com/papers/fingerprint-port80.txt
Comments are closed.