httprint

httprint is a web server fingerprinting tool designed to accurately identify web servers despite obfuscation techniques like changing server banner strings or using plugins such as mod_security or servermask. It relies on unique text signature strings from server responses, making it easy to extend the signature database for new servers or devices.

Use cases include reconnaissance during penetration testing to identify server types, detecting hidden web services on network devices like wireless access points, routers, switches, and cable modems. The tool supports input from hosts, files, or Nmap XML outputs, with flexible output formats for reporting.

It is particularly useful in scenarios where standard banner grabbing fails due to masking, providing deeper insights into the web infrastructure for further vulnerability assessment.

httprint sends HTTP requests to target hosts and analyzes server responses using a database of text signature strings that match unique characteristics in headers, error pages, and other responses. These signatures allow identification even without standard server banners. It supports HTTP and HTTPS (with automatic SSL detection unless disabled), handles redirects optionally, and uses multithreading for efficiency across IP ranges or lists.