Glock Talk

Glock Talk (http://glocktalk.com/forums/index.php)
-   Tech Talk (http://glocktalk.com/forums/forumdisplay.php?f=86)
-   -   how can i find out what OS a server is running? (http://glocktalk.com/forums/showthread.php?t=271149)

David_G17 07-30-2004 17:21

how can i find out what OS a server is running?
 
someone posted this in a chat room i visited:
Quote:

www.georgewbush.com: Win2003, IIS 6.
www.johnkerry.com: Red Hate, Apache 1.3.27.

The choice is clear.
and i'd like to 1.) validate that it's true and 2.) find out what the NSA's web server is.

(btw, the guy who said it is pro-microsoft)

HerrGlock 07-30-2004 17:37

Candidate Test Result Score
Dennis Kucinich
Results | Visit Site
OS Linux 1
Web Server Apache 1.3.27 / PHP
[bonus point] 3
Security 0 open ports 2
Accessibility Results -1
Valid CSS Validates 1
Valid HTML 129 Errors 0
Load Time 24.28 seconds on 56k -2
Content % 23.43 % 2
Total 6


John Kerry
Results | Visit Site
OS Linux 1
Web Server Apache 1.3.27 / PHP
[bonus point] 3
Security 1 open ports 0
Accessibility Results 0
Valid CSS Validates 1
Valid HTML 67 Errors 1
Load Time 22.83 seconds on 56k -1
Content % 14.10 % 0
Total 5


Ralph Nader
Results | Visit Site
OS Linux 1
Web Server Apache 1.3.2x / PHP
[bonus point] 3
Security 18 open ports -2
Accessibility Results 1
Valid CSS 4 Errors -1
Valid HTML 97 Errors 1
Load Time 19.50 seconds on 56k 1
Content % 19.26 % 1
Total 5


Al Sharpton
Results | Visit Site
OS Linux 1
Web Server Apache 2.0.40 2
Security 28 open ports -2
Accessibility Results -1
Valid CSS Validates 1
Valid HTML 87 Errors 1
Load Time 13.24 seconds on 56k 2
Content % 11.25 % -1
Total 3


George Bush
Results | Visit Site
OS Windows 2000 -1
Web Server Microsoft-IIS/5.0 -1
Security 0 open ports 2
Accessibility Results 0
Valid CSS 6 Errors -1
Valid HTML 144 Errors 0
Load Time 25.42 seconds on 56k -3
Content % 8.24 % -2
Total -8

David_G17 07-30-2004 17:52

how'd you get that HerrGlock?

HerrGlock 07-31-2004 05:19

Quote:

Originally posted by David_G17
how'd you get that HerrGlock?
http://www.ankylosaur.com/images/new...s/innocent.gif

But seriously, netcraft has "What's that site running" for anything you can get on the 'net.

The one I posted was from a *NIX board looking for a "How can we trust them to secure the country if they cannot secure their own servers?" page.

DanH

David_G17 07-31-2004 11:38

Windows 2000 Microsoft-IIS/5.0 8-May-2004 12.110.110.204 LINGUALISTEK
Windows 2000 Microsoft-IIS/5.0 20-Mar-2004 12.110.110.204 LINGUALISTEK
Windows 2000 Microsoft-IIS/5.0 19-May-2003 65.213.217.241 National Security Agency
unknown Microsoft-IIS/5.0 24-Aug-2002 65.213.217.241 National Security Agency
Windows 2000 Microsoft-IIS/5.0 23-Aug-2002 65.213.217.241 National Security Agency
unknown Microsoft-IIS/5.0 22-Aug-2002 65.213.217.241 National Security Agency
Windows 2000 Microsoft-IIS/5.0 19-Aug-2002 65.213.217.241 National Security Agency
unknown Microsoft-IIS/5.0 18-Aug-2002 65.213.217.241 National Security Agency
unknown Microsoft-IIS/5.0 18-Aug-2002 65.213.217.241 National Security Agency
Windows 2000 Microsoft-IIS/5.0 15-Aug-2002 65.213.217.241 National Security Agency



http://uptime.netcraft.com/up/graph?...%2Fwww.nsa.gov



;P :( ;Q

it's just their web servers, but still...

rotinom 08-03-2004 13:27

IIS != Insecure
 
FWIW, any server can be made secure. It's just a matter of how much time, money, effort you want to put into it. Considering that the NSA has lots of all, I sure wouldn't want to event attempt anything onthier systems. Heck, for all I know, they could have pulled the old trick of disconnecting the write pins on the hard drives that are serving the pages.

Besides, any company should basically consider any Internet-facing server to be "expendable". It's the back-end that is *really* valuable. You know, like the "acres" of computers that the NSA has ;-)

BikerGoddess 08-03-2004 16:35

*I* wouldn't vote for any Unix guru for president....

That said, the actual candidates might be able to learn something about security with accessibility. Or would that be accessibility with security? Either way, I see a strong similarity between our borders and the Internet, in that we're trying to close off what was never meant to be closed off.

Laura

HerrGlock 08-03-2004 18:22

Quote:

Originally posted by David_G17

it's just their web servers, but still...

Nope, it's the web servers of the company they have contracted to run their web servers ;f

Most of the Fed's web sites are contracted out so they are NOT on a network inside that could potentially give hackers/crackers a shot at having an easier way in.

DanH

physicsdevil 08-14-2004 22:01

Re: how can i find out what OS a server is running?
 
Quote:

Originally posted by David_G17
someone posted this in a chat room i visited:


and i'd like to 1.) validate that it's true and 2.) find out what the NSA's web server is.

(btw, the guy who said it is pro-microsoft)

As HerrGlock had suggested, Netcraft is a good resource for this type of information, but all that it's really doing is reading the HTTP header, which can be done via a number of methods. Usually, telnetting to port 80 and directly issuing a HEAD request is easiest.


All times are GMT -6. The time now is 21:18.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
Copyright 2013, Glock Talk, All Rights Reserved.