Banner Grabbing

Telnet Banner Grab

telnet 10.10.182.147 80
GET / HTTP/1.0
host: telnet

GET / HTTP/1.1
host: telnet

telnet banner grab

NetCat Banner Grab

nc 10.10.182.147
GET / HTTP/1.1
host: netcat

GET / HTTP/1.0
host: netcat

NetCat FTP Banner Grab

nc ftp

Openssl banner grab

• Used when https is open on the host

openssl s_client -connect domain.com:443 
GET / HTTP/1.0

HTTP Header Grabbing (curl)

# HTTP headers only (no body)
curl -I http://TARGET
curl -I https://TARGET

# Follow redirects
curl -IL http://TARGET

Look for:

• Server: - Web server software/version

• X-Powered-By: - Backend technology (PHP, Express, etc.)

• X-Redirect-By: - CMS (e.g., WordPress)