Examples: What sort of web server do you have?

Who is the owner of the server

• what is my ip address.com
• Who is Denic (German domains)
• "Who is" general
• The Swiss Army Knife for IP and DNS lookup

Fingerprint of the application

• Details given by OWASP
• HTTPrint, a web server fingerprinting tool (to be installed locally)
• Netcraft: makes a survey of web servers all araund the world.

Map of the application

• Download WebScarab NG OWASP web site

Uncompile fat client applications

• Uncompile: Show My Code : an online code uncompiler
• Direct link to the flash file of the advertisement.:
  http://stream.adspot.ch/ch.migros/espacemedia/10/expanding.sky.1154x650.swf
• Demo Applets by sun.com
  Direct url of the files:
  • http://java.sun.com/applets/jdk/1.4/demo/applets/SortDemo/SortItem.class
  • http://java.sun.com/applets/jdk/1.4/demo/applets/SortDemo/SortAlgorithm.class
  • http://java.sun.com/applets/jdk/1.4/demo/applets/SortDemo/BubbleSortAlgorithm.class

Other usefull tools

• Burp intruder is a tool for automating attacks against web applications.
• JAD Java Decompiler