Why was the error sent as a web page?
Using Telnet to Test TCP Services
a. In Part 1, nginx was found to be running and assigned to port 80 TCP. Although a quick Google search revealed that nginx is a lightweight web server, how would an analyst be sure of that? What if an attacker changed the name of a malware program to nginx, just to make it look like the popular web server? Use telnet to connect to the local host on port 80 TCP:
[analyst@secOps ~]$ telnet 127.0.0.1 80
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
b. Press a few letters on the keyboard. Any key will work. After a few keys are pressed, press ENTER. Below is the full output, including the Telnet connection establishment and the random keys pressed (fdsafsdaf, this case):
fdsafsdaf
HTTP/1.1 400 Bad Request
Server: nginx/1.10.2
Date: Tue, 28 Feb 2017 20:09:37 GMT
Content-Type: text/html
Content-Length: 173
Connection: close
400 Bad Request
400 Bad Request
nginx/1.10.2
Connection closed by foreign host.
Thanks to the Telnet protocol, a clear text TCP connection was established, by the Telnet client, directly to the nginx server, listening on 127.0.0.1 port 80 TCP. This connection allows us to send data directly to the server. Because nginx is a web server, it does not understand the sequence of random letters sent to it and returns an error in the format of a web page.
Nginx is a web server and as such, only speaks the HTTP protocol.
You might also like to view...
Answer the following questions true (T) or false (F)
1. To instantiate and call, a template function requires special syntax.
2. The template prefix can be written template
Which of the following cannot be done using the Customize Ribbon tab?
A) Change the order of groups in the tabs B) Add commands not available on the standard Ribbon C) Delete the Ribbon D) Create a new tab
To display a document with just the comments displayed, use __________ .
Fill in the blank(s) with the appropriate word(s).
Including the separating periods, what is the maximum number of characters allowed by the DNS naming convention?
A. 128 B. 80 C. 15 D. 255