How would you judge if a remote server is running IIS or Apache?
Answers were Sorted based on User's Feedback
Answer / chaitanya
Error messages oftentimes giveaway what the server is running, and many times if the website administrator has not set up custom error pages for every site, it can give it away as simply as just entering a known bad address. Other times, just using telnet can be enough to see how it responds. Never underestimate the amount of information that can be gained by not getting the right answer but by asking the right questions.
| Is This Answer Correct ? | 5 Yes | 0 No |
Answer / gaurav
Penetration testing techniques can easily reveal from a website which of the ports, operating systems and web servers are running. For Instance, Nikto and Owasp-Zed are two methods of doing this.
| Is This Answer Correct ? | 1 Yes | 0 No |
A phonetic password generator picks two segments randomly for each six-letter password. The form of each segment is CVC (consonant, vowel, consonant), where V= < a, e, i, o, u > and C = (V.) ̅ What is the total password population? What is the probability of an adversary guessing a password correctly?
What is the most commonly used computer application?
What is XSS?
What is the difference between a virus and a trojan?
0 Answers Tavant Technologies, Zensar,
What do you think of social networking sites such as Facebook and LinkedIn?
What are the most common computer applications?
I run an SMB. I have 4 people in my entire company and a web-based store. I don’t have the time, patience or manpower to have a computer guy. Why should I care about exploits and computer jibberish?
You see a user logging in as root to perform basic functions. Is this a problem?
How would you permanently remove the threat of data falling into the wrong hands?
What is the Chain of Custody?
How would you login to Active Directory from a Linux or Mac box?
What is SSL and why is it not enough when it comes to encryption?