Re: OS identification

[Theo Boersma <theo () tzeb demon nl>]

Doesn't Netcraft check the version string provided by your webserver?
If you're using apache, try /usr/sbin/httpd -L and look for this line:

ServerTokens (http_core.c)
        Determine tokens displayed in the Server: header - Min(imal), OS
or Full
        Allowed in *.conf only outside <Directory>, <Files> or
<Location>

happy faking!
Theo

> I have adjusted every HTTP header I can find.  I've hacked my initial
> tcp sequence number generator in my kernel.  I've changed my tcp window
> size, the default ttl of my ip packets, and everything else I can think
> of.  I still cannot convince Netcraft that I'm something I'm not.
>
> If anyone has any idea how Netcraft determines the operating system, I
> would be *thrilled* to hear about it.  I've changed everything I know to
> change and still can't figure it out.

--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to 
nmap-hackers-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).