Cybersecurity

Fingerprinting Server Software

Identify the server software, framework, and component versions a target is running from its HTTP response signatures — Server header, X-Powered-By, Via, X-AspNet-Version, X-Runtime, X-Drupal-Cache, X-Generator, Set-Cookie name patterns, error-page artwork, HTTP method behavior signatures. Use when: penetration test reconnaissance phase, post-deploy audit of fingerprintable exposure, or before reporting "no obvious version disclosure" to an auditor. Threshold: any version string in a response header (e.g., Server header with nginx/1.18.0, X-Powered-By with PHP/7.4.21, X-Generator with Drupal 9), or any framework-default Set-Cookie name (PHPSESSID, JSESSIONID, connect.sid, _csrf_token). Trigger with: "fingerprint server", "version disclosure", "tech-stack identification", "what's this site running".

Publisher / source
jeremylongshore/tons-of-skills-marketplace (found on GitHub top repositories)
Upstream record
jeremylongshore/tons-of-skills-marketplace
Version
Version 1
Published
Publication review
Approved for publication
Content fingerprint
d64e54b6b4de0d004cc6435e80a8176b3a02d5039751b5d70b59b5f5eb4874c1