Script http-headers

Script types: portrule
Categories: discovery, safe
Download: https://svn.nmap.org/nmap/scripts/http-headers.nse

Script Summary

Performs a HEAD request for the root folder ("/") of a web server and displays the HTTP headers returned.

See also:

Script Arguments

useget

Set to force GET requests instead of HEAD.

path

The path to request, such as /index.php. Default /.

slaxml.debug

See the documentation for the slaxml library.

http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent

See the documentation for the http library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap -sV --script=http-headers <target>

Script Output 

PORT   STATE SERVICE
80/tcp open  http
| http-headers:
|   Date: Fri, 25 Jan 2013 17:39:08 GMT
|   Server: Apache/2.2.14 (Ubuntu)
|   Accept-Ranges: bytes
|   Vary: Accept-Encoding
|   Connection: close
|   Content-Type: text/html
|
|_  (Request type: HEAD)

Requires

Author:

  • Ron Bowes

License: Same as Nmap--See https://nmap.org/book/man-legal.html