Sinisterly
Banner Grabbing(FTP, SSH, SMTP, and more) - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Banner Grabbing(FTP, SSH, SMTP, and more) (/Thread-Banner-Grabbing-FTP-SSH-SMTP-and-more)

Pages: 1 2


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - Vip3r - 08-24-2014

(08-24-2014, 07:31 PM)mls577 Wrote:
(08-24-2014, 06:52 PM)Vip3r Wrote: When i typed 'telnet <ip> <port>', I got the following message:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html

<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Can anyone please explain me, why is not it working?

HTTP is different, I used the above as examples because they were all similar. You'd have to follow up with a GET or HEAD request. I google for something simple for you: http://wcosughacking.blogspot.com/2011/06/banner-grabbing.html

If this fails there are other methods such as: http://www.net-square.com/httprint_paper.html
I tried it with netcat now and I still get the following error:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Feedbacks? Btw, does the 400 BAd request error indicate that the website uses Apache/1.3.23??


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - Vip3r - 08-24-2014

(08-24-2014, 07:31 PM)mls577 Wrote:
(08-24-2014, 06:52 PM)Vip3r Wrote: When i typed 'telnet <ip> <port>', I got the following message:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html

<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Can anyone please explain me, why is not it working?

HTTP is different, I used the above as examples because they were all similar. You'd have to follow up with a GET or HEAD request. I google for something simple for you: http://wcosughacking.blogspot.com/2011/06/banner-grabbing.html

If this fails there are other methods such as: http://www.net-square.com/httprint_paper.html
I tried it with netcat now and I still get the following error:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Feedbacks? Btw, does the 400 BAd request error indicate that the website uses Apache/1.3.23??


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - mls577 - 08-25-2014

(08-24-2014, 08:25 PM)Vip3r Wrote:
(08-24-2014, 07:31 PM)mls577 Wrote:
(08-24-2014, 06:52 PM)Vip3r Wrote: When i typed 'telnet <ip> <port>', I got the following message:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html

<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Can anyone please explain me, why is not it working?

HTTP is different, I used the above as examples because they were all similar. You'd have to follow up with a GET or HEAD request. I google for something simple for you: http://wcosughacking.blogspot.com/2011/06/banner-grabbing.html

If this fails there are other methods such as: http://www.net-square.com/httprint_paper.html
I tried it with netcat now and I still get the following error:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Feedbacks? Btw, does the 400 BAd request error indicate that the website uses Apache/1.3.23??
perhaps you entered something wrong? can you copy and paste the commands you tried to run and also the website you're trying on. Also why did you ask about that apache version specifically?


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - Vip3r - 08-25-2014

(08-25-2014, 05:43 AM)mls577 Wrote:
(08-24-2014, 08:25 PM)Vip3r Wrote:
(08-24-2014, 07:31 PM)mls577 Wrote:
(08-24-2014, 06:52 PM)Vip3r Wrote: When i typed 'telnet <ip> <port>', I got the following message:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html

<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Can anyone please explain me, why is not it working?

HTTP is different, I used the above as examples because they were all similar. You'd have to follow up with a GET or HEAD request. I google for something simple for you: http://wcosughacking.blogspot.com/2011/06/banner-grabbing.html

If this fails there are other methods such as: http://www.net-square.com/httprint_paper.html
I tried it with netcat now and I still get the following error:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Feedbacks? Btw, does the 400 BAd request error indicate that the website uses Apache/1.3.23??
perhaps you entered something wrong? can you copy and paste the commands you tried to run and also the website you're trying on. Also why did you ask about that apache version specifically?
I asked the apache version specifically because in one of the links there was a box which mentioned the possibily of errors due to command. There it was mentioned that '400 Bad Request' due to improper HTTP version is generally caused by apache server(I might be wrong because I am completely new to hacking. I am just a programmer). My code that I typed is:

nc 141.0.174.40 80 --> It's the IP of the website I was trying to access.
head/http/1.0


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - mls577 - 08-26-2014

(08-25-2014, 08:04 AM)Vip3r Wrote:
(08-25-2014, 05:43 AM)mls577 Wrote:
(08-24-2014, 08:25 PM)Vip3r Wrote:
(08-24-2014, 07:31 PM)mls577 Wrote:
(08-24-2014, 06:52 PM)Vip3r Wrote: When i typed 'telnet <ip> <port>', I got the following message:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html

<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Can anyone please explain me, why is not it working?

HTTP is different, I used the above as examples because they were all similar. You'd have to follow up with a GET or HEAD request. I google for something simple for you: http://wcosughacking.blogspot.com/2011/06/banner-grabbing.html

If this fails there are other methods such as: http://www.net-square.com/httprint_paper.html
I tried it with netcat now and I still get the following error:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Feedbacks? Btw, does the 400 BAd request error indicate that the website uses Apache/1.3.23??
perhaps you entered something wrong? can you copy and paste the commands you tried to run and also the website you're trying on. Also why did you ask about that apache version specifically?
I asked the apache version specifically because in one of the links there was a box which mentioned the possibily of errors due to command. There it was mentioned that '400 Bad Request' due to improper HTTP version is generally caused by apache server(I might be wrong because I am completely new to hacking. I am just a programmer). My code that I typed is:

nc 141.0.174.40 80 --> It's the IP of the website I was trying to access.
head/http/1.0
That's simple a http status code:http://en.wikipedia.org/wiki/List_of_HTTP_status_codes it doesn't specifically mean that the http software is apache.I figured out your problem. Since you're a programmer, I'm sure you understand that "head" and "HEAD" are two different things. think of it like the difference between the statement "print()" and "PRINT()". the first line is fine but you need to change your second line to:
Code:
HEAD / HTTP/1.0

or
Code:
GET / HTTP/1.0

though notice if you do it right, you get this:
Code:
HTTP/1.1 200 OK Server: nginx Date: Tue, 26 Aug 2014 04:43:49 GMT Content-Type: text/html Connection: close P3P: policyref="/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV I NT"
Look carefully, it doesn't really reveal anything helpful. Some sites will edit the information like the one above and give you nothing or even give you false/made up information.


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - mu9i - 08-28-2014

nice share bro,.. :Thumbs-Up:
but, i think nc / nmap is much better.... :Heart:



Quote:orly sorry for my english



RE: Banner Grabbing(FTP, SSH, SMTP, and more) - mls577 - 08-29-2014

(08-28-2014, 11:02 PM)mu9i Wrote: nice share bro,.. :Thumbs-Up:
but, i think nc / nmap is much better.... :Heart:



Quote:orly sorry for my english

oh, I'm not refuting that. that's not the point of this. If you rely too much on tools, you'll never actually learn anything. This is the manual way of doing one feature of a tool like nmap.


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - mu9i - 09-01-2014

yeah you're right,...
n thank for the advice... Biggrin


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - Vip3r - 09-07-2014

(08-26-2014, 06:01 AM)mls577 Wrote:
(08-25-2014, 08:04 AM)Vip3r Wrote:
(08-25-2014, 05:43 AM)mls577 Wrote:
(08-24-2014, 08:25 PM)Vip3r Wrote:
(08-24-2014, 07:31 PM)mls577 Wrote: HTTP is different, I used the above as examples because they were all similar. You'd have to follow up with a GET or HEAD request. I google for something simple for you: http://wcosughacking.blogspot.com/2011/06/banner-grabbing.html

If this fails there are other methods such as: http://www.net-square.com/httprint_paper.html
I tried it with netcat now and I still get the following error:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Feedbacks? Btw, does the 400 BAd request error indicate that the website uses Apache/1.3.23??
perhaps you entered something wrong? can you copy and paste the commands you tried to run and also the website you're trying on. Also why did you ask about that apache version specifically?
I asked the apache version specifically because in one of the links there was a box which mentioned the possibily of errors due to command. There it was mentioned that '400 Bad Request' due to improper HTTP version is generally caused by apache server(I might be wrong because I am completely new to hacking. I am just a programmer). My code that I typed is:

nc 141.0.174.40 80 --> It's the IP of the website I was trying to access.
head/http/1.0
That's simple a http status code:http://en.wikipedia.org/wiki/List_of_HTTP_status_codes it doesn't specifically mean that the http software is apache.I figured out your problem. Since you're a programmer, I'm sure you understand that "head" and "HEAD" are two different things. think of it like the difference between the statement "print()" and "PRINT()". the first line is fine but you need to change your second line to:
Code:
HEAD / HTTP/1.0

or
Code:
GET / HTTP/1.0

though notice if you do it right, you get this:
Code:
HTTP/1.1 200 OK Server: nginx Date: Tue, 26 Aug 2014 04:43:49 GMT Content-Type: text/html Connection: close P3P: policyref="/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV I NT"
Look carefully, it doesn't really reveal anything helpful. Some sites will edit the information like the one above and give you nothing or even give you false/made up information.
I guess it makes sense now. Thanks for the help Smile


RE: Banner Grabbing(FTP, SSH, SMTP, and more) - Vip3r - 09-07-2014

(08-26-2014, 06:01 AM)mls577 Wrote:
(08-25-2014, 08:04 AM)Vip3r Wrote:
(08-25-2014, 05:43 AM)mls577 Wrote:
(08-24-2014, 08:25 PM)Vip3r Wrote:
(08-24-2014, 07:31 PM)mls577 Wrote: HTTP is different, I used the above as examples because they were all similar. You'd have to follow up with a GET or HEAD request. I google for something simple for you: http://wcosughacking.blogspot.com/2011/06/banner-grabbing.html

If this fails there are other methods such as: http://www.net-square.com/httprint_paper.html
I tried it with netcat now and I still get the following error:
HTTP/1.0 400 Bad request
Cache-Control: no-cache
Connection: close
Content-Type: text/html
<html><body><h1>400 Bad request</h1>
Your browser sent an invalid request.
</body>
</html>
Feedbacks? Btw, does the 400 BAd request error indicate that the website uses Apache/1.3.23??
perhaps you entered something wrong? can you copy and paste the commands you tried to run and also the website you're trying on. Also why did you ask about that apache version specifically?
I asked the apache version specifically because in one of the links there was a box which mentioned the possibily of errors due to command. There it was mentioned that '400 Bad Request' due to improper HTTP version is generally caused by apache server(I might be wrong because I am completely new to hacking. I am just a programmer). My code that I typed is:

nc 141.0.174.40 80 --> It's the IP of the website I was trying to access.
head/http/1.0
That's simple a http status code:http://en.wikipedia.org/wiki/List_of_HTTP_status_codes it doesn't specifically mean that the http software is apache.I figured out your problem. Since you're a programmer, I'm sure you understand that "head" and "HEAD" are two different things. think of it like the difference between the statement "print()" and "PRINT()". the first line is fine but you need to change your second line to:
Code:
HEAD / HTTP/1.0

or
Code:
GET / HTTP/1.0

though notice if you do it right, you get this:
Code:
HTTP/1.1 200 OK Server: nginx Date: Tue, 26 Aug 2014 04:43:49 GMT Content-Type: text/html Connection: close P3P: policyref="/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV I NT"
Look carefully, it doesn't really reveal anything helpful. Some sites will edit the information like the one above and give you nothing or even give you false/made up information.
I guess it makes sense now. Thanks for the help Smile