|
| 1 | +## Description |
| 2 | + |
| 3 | +This module shows HTTP Headers returned by the scanned systems. |
| 4 | + |
| 5 | +## Verification Steps |
| 6 | + |
| 7 | +1. Do: ```use auxiliary/scanner/http/http_header``` |
| 8 | +2. Do: ```set RHOSTS [IP]``` |
| 9 | +3. Do: ```set RPORT [PORT]``` |
| 10 | +4. Do: ```run``` |
| 11 | + |
| 12 | +## Scenarios |
| 13 | + |
| 14 | +**Running the scanner** |
| 15 | + |
| 16 | +``` |
| 17 | +msf > use auxiliary/scanner/http/http_header |
| 18 | +msf auxiliary(http_header) > show options |
| 19 | +
|
| 20 | +Module options (auxiliary/scanner/http/http_header): |
| 21 | +
|
| 22 | + Name Current Setting Required Description |
| 23 | + ---- --------------- -------- ----------- |
| 24 | + HTTP_METHOD HEAD yes HTTP Method to use, HEAD or GET (Accepted: GET, HEAD) |
| 25 | + IGN_HEADER Vary,Date,Content-Length,Connection,Etag,Expires,Pragma,Accept-Ranges yes List of headers to ignore, seperated by comma |
| 26 | + Proxies no A proxy chain of format type:host:port[,type:host:port][...] |
| 27 | + RHOSTS yes The target address range or CIDR identifier |
| 28 | + RPORT 80 yes The target port (TCP) |
| 29 | + SSL false no Negotiate SSL/TLS for outgoing connections |
| 30 | + TARGETURI / yes The URI to use |
| 31 | + THREADS 1 yes The number of concurrent threads |
| 32 | + VHOST no HTTP server virtual host |
| 33 | +
|
| 34 | +msf auxiliary(http_header) > set RHOSTS 192.168.56.101 |
| 35 | +RHOSTS => 192.168.56.101 |
| 36 | +msf auxiliary(http_header) > run |
| 37 | +
|
| 38 | +[+] 192.168.56.101:80 : CONTENT-TYPE: text/html |
| 39 | +[+] 192.168.56.101:80 : SERVER: Apache/2.2.8 (Ubuntu) DAV/2 |
| 40 | +[+] 192.168.56.101:80 : X-POWERED-BY: PHP/5.2.4-2ubuntu5.10 |
| 41 | +[+] 192.168.56.101:80 : detected 3 headers |
| 42 | +[*] Scanned 1 of 1 hosts (100% complete) |
| 43 | +[*] Auxiliary module execution completed |
| 44 | +msf auxiliary(http_header) > |
| 45 | +
|
| 46 | +``` |
0 commit comments