Re: [PEN-TEST] "Type-of-webserver"-scanner?

[Vanja Hrustic <vanja () RELAYGROUP COM>]

On Mon, Dec 11, 2000 at 01:57:31PM +0100, Johan.Augustsson wrote:
> I've been 'ordered' to find out how many webservers there are in our
> network and devide them into Apache and IIS. So I ran nmap for port 80 in a
> small area of our network and found a bunch of servers running some kind of
> http-servers. Is there any nice tool out there which connects to the target
> at port 80 and get the servertype for me or do I have to telnet all those
> servers at port 80 and manually check each server? I guess I could code
> something in Perl, but I'm not a great coder so thats not an option.  :)
>
> Johan Augustsson

I've written very small/silly tool in perl some months ago, that collects "Server:" headers and shows them. It's also 
forking and has a limit on how
long to wait for connection to be established, so it should be possible to scan 'firewalled' ranges fairly quickly.

It is at:

http://www.vanja.com/tools/http_harvester.pl

Hope it helps.

--

Vanja Hrustic
The Relay Group
http://relaygroup.com
Technology Ahead of Time