Which activity involves inferring a target's underlying operating system and software from HTTP responses?

Which activity involves inferring a target's underlying operating system and software from HTTP responses?

• A. Scanning
• B. Enumerating
• C. Exploitation
• D. Fingerprinting

Answer: (D)

Inferring a target's operating system and software from HTTP responses is fingerprinting. This technique examines the information revealed in HTTP replies to identify the underlying platform and services running on a host. For example, server headers like “Server: Apache/2.x” or “X-Powered-By: PHP/7.x” can indicate web server software and versions, while other header quirks, response banners, and behavior (such as how errors are formatted or how timing responses vary) can hint at the operating system and specific service implementations. Fingerprinting is a reconnaissance activity that helps attackers or defenders understand the target's tech stack so they can tailor further steps, such as vulnerability assessment or exploitation, more effectively. Scanning, by contrast, focuses on discovering open ports and reachable services, enumerating gathers more detailed information about user accounts, shares, and configurations, and exploitation involves taking advantage of identified vulnerabilities.

Inferring a target's operating system and software from HTTP responses is fingerprinting. This technique examines the information revealed in HTTP replies to identify the underlying platform and services running on a host. For example, server headers like “Server: Apache/2.x” or “X-Powered-By: PHP/7.x” can indicate web server software and versions, while other header quirks, response banners, and behavior (such as how errors are formatted or how timing responses vary) can hint at the operating system and specific service implementations. Fingerprinting is a reconnaissance activity that helps attackers or defenders understand the target's tech stack so they can tailor further steps, such as vulnerability assessment or exploitation, more effectively.

Scanning, by contrast, focuses on discovering open ports and reachable services, enumerating gathers more detailed information about user accounts, shares, and configurations, and exploitation involves taking advantage of identified vulnerabilities.