I often forget how to get the OS type and service type’s of remote servers. Here are a few commands that are quick, easy, and effective.
If curl is installed you can execute curl –head http://www.example.com to return web server and OS information. Note there are two dashes in front of head.
If nmap is installed nmap -p 80 -sV http://www.example.com will return the same information as above. The added benefit of using nmap is that you can change the port number parameter in front of -p to anything (25 for smtp, 21 for ftp, etc).
No related posts.