Questions tagged [os-fingerprinting]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
105 views

TLS Private Key Secured with Hardware Fingerprint

I worked for a company where our TLS Private Key was accidentally leaked to the Internet and it was a big mess. The strategy the security team came up for avoiding this in the future was "be more ...
Charlie's user avatar
  • 125
1 vote
1 answer
280 views

How to hide PC characteristics on the internet from tools like NMAP etc [closed]

Is there a way to disguise your PC characteristics from tools like NMAP and others on the internet? For instance if the OS you are using is Ubuntu is there a way to make it show up as something else. ...
Rideboards's user avatar
1 vote
0 answers
224 views

Determining Windows version from a list of files

I have a list of files taken from a dead system, but not the actual files themselves, or any other information (e.g. properties) that would indicate the OS version. Is there a way to determine the ...
Plesbien's user avatar
0 votes
1 answer
177 views

Fingerprinting Windows Architecture from a file on remote system

This is a post following up with this one. Similar situation as the above post - I'd like to know if there's a way to find out the architecture (x86 or x64) of a windows system from a file on a ...
Izy-'s user avatar
  • 873
1 vote
1 answer
534 views

How os fingerprinting works and how to prevent it in browser? [duplicate]

For privacy I always changed my useragent of browser regularly and it used to work. But lately changing useragent alone in browser dosen't prevent os fingerprinting. Tools like https://browserleaks....
Eka's user avatar
  • 569
2 votes
2 answers
2k views

How does Cloudflare track their client? Tor is not a workaround

I mirrored a ecommerce site using wget. This site seems to use Cloudflare to handle their web traffic. What's interesting is that after 90 % or so of the mirroring was done, wget started to produce/...
d-b's user avatar
  • 499
3 votes
1 answer
349 views

Is there a way to find out what information website queries about us? [closed]

What tool or software should I look for to find out what "fingerprinting" data a website is tracking? Like, I want to know, if website looks for a cache and/or fonts installed in system, or Canval, ...
Anton's user avatar
  • 141
0 votes
1 answer
238 views

Re-run nmap OS fingerprint match with existing subject fingerprint

I have a collection of nmap subject fingerprints (described here), but have updated my local (private) reference fingerprint database since they were collected. Is there any existing way to re-match ...
njv299's user avatar
  • 3
3 votes
1 answer
893 views

How is fingerprint authentication integrated with a backend server?

If a fingerprint authentication mechanism, such as iOS's Touch Id, informs an app that it has been successful, how does one securely call back to a web server such that a security ticket can be ...
Ian Warburton's user avatar
2 votes
1 answer
3k views

OS Fingerprinting difficulties with nmap and zenmap

I am a college student and I am doing a project on information gathering and I am having some difficulties when I run nmap and zenmap for OS fingerprinting. I get some results that I don't understand,...
esseker lavezzi's user avatar
1 vote
1 answer
574 views

Passive fingerprinting of DNS client

Given a network trace that includes DNS request packets, is it possible to infer or guess which DNS client send those requests? In other words, consider a network monitoring box that can see all the ...
D.W.'s user avatar
  • 99.6k
8 votes
3 answers
3k views

Passive fingerprinting of HTTPS client

Is it possible to passively fingerprint a HTTPS client, based solely on data visible to a network eavesdropper? In other words, consider a network monitoring box that can see all the packets (but ...
D.W.'s user avatar
  • 99.6k
1 vote
1 answer
470 views

OS fingerprinting via TCP

I have searched online about this topic and the only information I got is that TCP SYN/ACK can be used to know the type of the target OS. If that is true, I don't understand how this occurs? Does TCP ...
Steve's user avatar
  • 135
0 votes
1 answer
961 views

Block OS fingerprinting without using iptables?

I have a Linux machine connected to a Windows 98 PC on port 104. Now I want to block the OS fingerprinting using nmap for the windows 98 PC. I tried using iptables (blocking that particular port) but ...
Megja's user avatar
  • 1
7 votes
2 answers
2k views

Extra p0f v3 fingerprints files?

p0f v3 is a passive operating system detector. The latest release is 3.08b, dating to November, 2014. Given the releases of Windows 10, multiple Linux, Firefox and Chrome versions since then, the ...
Bruce Ediger's user avatar
  • 4,532
8 votes
1 answer
15k views

Message signing disabled (dangerous, but default)

Over the last couple of years, I've developed a fairly keen interest in Penetration Testing & Information Security. Throughout this time, I've acquired (and accumulated) a range of different ...
voices's user avatar
  • 1,779
0 votes
2 answers
249 views

Browser Fingerprinting and Passwords stored by browser

I am using the Firefox browser on a Linux system and it came to my knowledge that it is possible for sites to take a fingerprint of the user visiting their homepages. So I actually have four ...
Junior J. Garland's user avatar
0 votes
2 answers
2k views

Does Nmap requires a closed TCP port to do OS fingerprinting?

I was checking the security of a server by running Nmap. Last time it gives me the following results, indicating that OS could not be fingerprinted: PORT STATE SERVICE VERSION 21/tcp ...
Question Overflow's user avatar
3 votes
2 answers
8k views

Spoofing OS during browsing

I am using http://www.mybrowserinfo.com/ to gather some info about me while browsing. I want to change my OS to appear that its a Windows Xp machine.(No VM solutions please:D) If you have any ...
blended's user avatar
  • 2,871
4 votes
2 answers
4k views

OS Fingerprinting for Android

Are traditional OS-fingerprinting techniques effective in identifying Android smartphones (OS version) on a network. From my research I found most Android network mappers can be only run from Android ...
Ali Ahmad's user avatar
  • 4,844
5 votes
8 answers
488 views

Is it useful to determine the name of the server software while doing a penetration test?

Getting the name of the server software through netcat or curl or any other method, is really useful? I mean, OS fingerprinting is useful in order to tailor an attack. For example with regard to OS ...
g9999's user avatar
  • 225
2 votes
5 answers
2k views

OS fingerprinting: can I rely on the results?

Using nmap -O www.example.com I get: Running (JUST GUESSING): Microsoft Windows 7|2008 (90%) So I can say the target site is running Windows. Using xprobe2 -v www.example.com, I'm just astonished ...
g9999's user avatar
  • 225
5 votes
2 answers
761 views

How effective is changing the MAC address?

Since every vendor has a MAC address range, and Apple has network card models that only they use (Airport), I suppose that it is very easy to identify a network package as coming from an Apple device, ...
SystematicFrank's user avatar
2 votes
3 answers
8k views

How to find the OS of the target machine

I am new to this field. Currently I am using Linux OS and my question is how can I find the OS of another machine to which I do not have a direct access. I am interested in any possibilities which ...
Alex's user avatar
  • 422