Paper: Web Application finger printing Methods/Techniques and Prevention

Table of Contents

1. Abstract
2. Theory of Finger Printing and Web Application Finger printing
3. Usage of Web Application Finger Printing
4. Methods of Web Application Finger Printing
   • HTML Data Inspection
   • File and Folder Presence (HTTP response codes)
   • Checksum Based identification
5. Disadvantages of Current automated Solutions
6. Case Study of various Web Application finger printing Software�s
   
   • WhatWeb
   • Wapplyzer
   • BlindElephant
   • Plecost (Specialized Scanner for Wordpress)
   • W3af Wordpress finger printer
7. Inherent Flaws in the Design of Current automation ToolsThwarting Web Application Finger Printing
   • HTML cleansing
   • File and folder Restrictions
   • Checksum Management
     • Static Text Files (HTML, JS, CSS)
     • Image files (PNG, JPG, ICO, GIF)
     • Incremental chaos
9. Enhancing Current Tools and future directions
   • New Approach for Tools
   • Cross Referencing other techniques & using Human Common Sense in Tools
10. Conclusion
11. References

 



Paper: Web Application finger printing Methods/Techniques and Prevention

Anant Shrivastava
17 july 2011