利用错误信息与默认内容定位Web服务器
在网络安全和服务器管理领域,了解如何定位不同类型的Web服务器及其应用程序至关重要。通过分析服务器产生的错误信息、默认页面、默认文档和示例程序,我们可以深入了解服务器的配置和潜在风险。
1. 服务器错误页面及搜索技巧
服务器在运行过程中会产生各种错误页面,这些页面包含了丰富的信息。以英文Apache 2.0错误页面为例,不同的错误标题和部分文本对应着不同的错误情况,如下表所示:
| 错误页面标题 | 错误页面部分文本 |
| — | — |
| Bad gateway! | The proxy server received an invalid response from an upstream server. |
| Bad request! | Your browser (or proxy) sent a request that this server could not understand. |
| Access forbidden! | You don’t have permission to access the requested directory. Either there is no index document or the directory is read - protected. |
| Resource is no longer available! | The requested URL is no longer available on this server and there is no forwarding address. |
| Server