4 ms·
Fingerprinting web applications (Wordpress, Joomla and Mediawiki)
- j_lagof 17y agoVery interesting research describing a simple way to detect which version a web app is running. They just fingerprint a few css/js files, get their md5sums and create a list of them for each version...
- tptacek 17y agoThis is fairly primitive. The techniques used by tools like nmap to fingerprint operating systems were established in the early 90's by Comer, and they involve behavioral testing. You should assume that even if you modify all the files in your (say) Wordpress distribution, an attacker can still fingerprint it.
- scorxn 17y agoEven though this technique is primitive, how would you say it compares to the techniques used by run-of-the-mill comment spammers to identify and exploit outdated installations? Are most of them stopping at meta generator?
- bensummers 17y agoI doubt it's worth doing much more than looking at version comments in the HTML, because the majority of people won't go to the effort of hiding the version.
- fossguy 17y agoJoomla, for example doesn't dump their version in the generator field (nor does mediawiki, I believe). Only wordpress like to do that.
- fossguy 17y agoSimple but works... In the same way that if you modify your tcp/ip stack, nmap (or p0f) will get all confused and report the wrong os,