Questions tagged [os-fingerprinting]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-2
votes
0answers
28 views

Discovering OS and version after nmap port scan [duplicate]

I have done a nmap scan on a server. It's showing 4 ports open and the OS is undetectable. I am trying the find out the OS on the server through nmap findings, but nmap is not showing any clear OS ...
0
votes
1answer
45 views

Fingerprinting Windows Architecture from a file on remote system

This is a post following up with this one. Similar situation as the above post - I'd like to know if there's a way to find out the architecture (x86 or x64) of a windows system from a file on a ...
0
votes
1answer
152 views

How os fingerprinting works and how to prevent it in browser? [duplicate]

For privacy I always changed my useragent of browser regularly and it used to work. But lately changing useragent alone in browser dosen't prevent os fingerprinting. Tools like https://browserleaks....
1
vote
2answers
343 views

How does Cloudflare track their client? Tor is not a workaround

I mirrored a ecommerce site using wget. This site seems to use Cloudflare to handle their web traffic. What's interesting is that after 90 % or so of the mirroring was done, wget started to produce/...
3
votes
1answer
131 views

Is there a way to find out what information website queries about us? [closed]

What tool or software should I look for to find out what "fingerprinting" data a website is tracking? Like, I want to know, if website looks for a cache and/or fonts installed in system, or Canval, ...
0
votes
1answer
137 views

Re-run nmap OS fingerprint match with existing subject fingerprint

I have a collection of nmap subject fingerprints (described here), but have updated my local (private) reference fingerprint database since they were collected. Is there any existing way to re-match ...
3
votes
1answer
510 views

How is fingerprint authentication integrated with a backend server?

If a fingerprint authentication mechanism, such as iOS's Touch Id, informs an app that it has been successful, how does one securely call back to a web server such that a security ticket can be ...
2
votes
1answer
893 views

OS Fingerprinting difficulties with nmap and zenmap

I am a college student and I am doing a project on information gathering and I am having some difficulties when I run nmap and zenmap for OS fingerprinting. I get some results that I don't understand,...
1
vote
1answer
416 views

Passive fingerprinting of DNS client

Given a network trace that includes DNS request packets, is it possible to infer or guess which DNS client send those requests? In other words, consider a network monitoring box that can see all the ...
7
votes
3answers
2k views

Passive fingerprinting of HTTPS client

Is it possible to passively fingerprint a HTTPS client, based solely on data visible to a network eavesdropper? In other words, consider a network monitoring box that can see all the packets (but ...
1
vote
1answer
254 views

OS fingerprinting via TCP

I have searched online about this topic and the only information I got is that TCP SYN/ACK can be used to know the type of the target OS. If that is true, I don't understand how this occurs? Does TCP ...
0
votes
1answer
696 views

Block OS fingerprinting without using iptables?

I have a Linux machine connected to a Windows 98 PC on port 104. Now I want to block the OS fingerprinting using nmap for the windows 98 PC. I tried using iptables (blocking that particular port) but ...
5
votes
2answers
1k views

Extra p0f v3 fingerprints files?

p0f v3 is a passive operating system detector. The latest release is 3.08b, dating to November, 2014. Given the releases of Windows 10, multiple Linux, Firefox and Chrome versions since then, the ...
8
votes
1answer
8k views

Message signing disabled (dangerous, but default)

Over the last couple of years, I've developed a fairly keen interest in Penetration Testing & Information Security. Throughout this time, I've acquired (and accumulated) a range of different ...
0
votes
2answers
154 views

Browser Fingerprinting and Passwords stored by browser

I am using the Firefox browser on a Linux system and it came to my knowledge that it is possible for sites to take a fingerprint of the user visiting their homepages. So I actually have four ...
0
votes
2answers
985 views

Does Nmap requires a closed TCP port to do OS fingerprinting?

I was checking the security of a server by running Nmap. Last time it gives me the following results, indicating that OS could not be fingerprinted: PORT STATE SERVICE VERSION 21/tcp ...
1
vote
2answers
4k views

Spoofing OS during browsing

I am using http://www.mybrowserinfo.com/ to gather some info about me while browsing. I want to change my OS to appear that its a Windows Xp machine.(No VM solutions please:D) If you have any ...
4
votes
2answers
3k views

OS Fingerprinting for Android

Are traditional OS-fingerprinting techniques effective in identifying Android smartphones (OS version) on a network. From my research I found most Android network mappers can be only run from Android ...
5
votes
7answers
255 views

Is it useful to determine the name of the server software while doing a penetration test?

Getting the name of the server software through netcat or curl or any other method, is really useful? I mean, OS fingerprinting is useful in order to tailor an attack. For example with regard to OS ...
2
votes
5answers
2k views

OS fingerprinting: can I rely on the results?

Using nmap -O www.example.com I get: Running (JUST GUESSING): Microsoft Windows 7|2008 (90%) So I can say the target site is running Windows. Using xprobe2 -v www.example.com, I'm just astonished ...
5
votes
2answers
631 views

How effective is changing the MAC address?

Since every vendor has a MAC address range, and Apple has network card models that only they use (Airport), I suppose that it is very easy to identify a network package as coming from an Apple device, ...
1
vote
3answers
4k views

How to find the OS of the target machine

I am new to this field. Currently I am using Linux OS and my question is how can I find the OS of another machine to which I do not have a direct access. I am interested in any possibilities which ...