- http://php.net/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 ( PHP Credits )
- http://php.net/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 ( PHP Logo )
- http://php.net/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 ( Zend Logo )
- http://php.net/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 ( PHP Logo 2 )
Each server side programming language has their own quarks which make them distinct. w3af has a number of "Discovery" plugins for gaining information about a remote server. A good example is the w3af plugin PHPEggs.
This plugin tries to find the documented easter eggs that exist in PHP and identify
the remote PHP version using the easter egg content. The easter eggs that this plugin
verifies are:
- http://php.net/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 ( PHP Credits )
- http://php.net/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 ( PHP Logo )
- http://php.net/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 ( Zend Logo )
- http://php.net/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 ( PHP Logo 2 )
发布评论
评论(4)
可以通过一些方法实现:
.php
显然是由 php 生成的)如果这些都没有帮助,除了向公司发送电子邮件之外,没有机会找到它。
It is may possible via some methods:
.php
is obviously generated by php)If none of these will help, there is no chance of finding it out except emailing the company.
每种服务器端编程语言都有自己的夸克,这使它们与众不同。 w3af 有许多“Discovery”插件,用于获取有关远程服务器的信息。一个很好的例子是 w3af 插件 PHPEggs。
Each server side programming language has their own quarks which make them distinct. w3af has a number of "Discovery" plugins for gaining information about a remote server. A good example is the w3af plugin PHPEggs.
有时,您可以通过观察 HTTP 标头和页面“扩展名”(例如 asp)获得提示。
...但您永远无法确定例如伪装页面扩展是否容易。
Sometimes you can get hints from observing the HTTP headers and page "extensions" e.g. asp.
... but you can never be sure e.g. masquerading page extensions is easy.
查看页面扩展名,例如 .php
如果网站使用 mod_rewrite,您将无法看到他们使用的语言。
Look at the page extension, for example .php
If the website uses mod_rewrite you can't see wich language they use.