full-disclosure - HTTP 404 - Content-Type: image/gif

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 20 Nov 2006 13:00:00 -0300
From: "Joshua Tagnore" <joshua.tagnore@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: HTTP 404 - Content-Type: image/gif

Hi list !,

    While performing a pentest I found the following:

mafo:/home/joshua/$ nc XXXXX 80 -v -v
GET http://www.XXXXXX.com/YYYYYY HTTP/1.0


HTTP/1.0 404 Not Found
Date: Fri, 17 Nov 2006 13:40:47 GMT
Content-Length: 0
Content-Type: image/gif
Server: Apache/2.0.54 (Unix)

    The thing to notice here is the "Content-Type: image/gif" header
returned by the server. The requests that return this header are all
requests that dont end in .html ; for example
http://www.XXXXXX.com/f00.htmlwill return a normal header, but
http://XXXXXX.com/bar.txt will return a "Content-Type: image/gif". Does
anyone have a clue about this configuration ? What is it for ?

Cheers,
-- 
Joshua Tagnore

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/