<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: iis</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/iis.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2011-01-05T13:37:00+00:00</updated><author><name>Simon Willison</name></author><entry><title>How can I determine which web server a particular website is using (Apache, IIS, Nginx, etc)?</title><link href="https://simonwillison.net/2011/Jan/5/how-can-i-determine/#atom-tag" rel="alternate"/><published>2011-01-05T13:37:00+00:00</published><updated>2011-01-05T13:37:00+00:00</updated><id>https://simonwillison.net/2011/Jan/5/how-can-i-determine/#atom-tag</id><summary type="html">
    &lt;p&gt;&lt;em&gt;My answer to &lt;a href="https://www.quora.com/How-can-I-determine-which-web-server-a-particular-website-is-using-Apache-IIS-Nginx-etc/answer/Simon-Willison"&gt;How can I determine which web server a particular website is using (Apache, IIS, Nginx, etc)?&lt;/a&gt; on Quora&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;If you're on Linux or OS X, use curl with the -I option (to make a HEAD request and see the HTTP headers):&lt;/p&gt;

&lt;p&gt;$ curl -I &lt;span&gt;&lt;a href="http://www.op3intl.com"&gt;www.op3intl.com&lt;/a&gt;&lt;/span&gt;&lt;br /&gt;HTTP/1.1 200 OK&lt;br /&gt;Date: Thu, 06 Jan 2011 03:31:28 GMT&lt;br /&gt;Server: Microsoft-IIS/6.0&lt;/p&gt;

&lt;p&gt;...&lt;/p&gt;
    
        &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/apache"&gt;apache&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/iis"&gt;iis&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/nginx"&gt;nginx&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/servers"&gt;servers&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/web-development"&gt;web-development&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/webservers"&gt;webservers&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/quora"&gt;quora&lt;/a&gt;&lt;/p&gt;
    

</summary><category term="apache"/><category term="iis"/><category term="nginx"/><category term="servers"/><category term="web-development"/><category term="webservers"/><category term="quora"/></entry><entry><title>Mass Attack FAQ</title><link href="https://simonwillison.net/2008/Apr/26/hackademixnet/#atom-tag" rel="alternate"/><published>2008-04-26T09:12:13+00:00</published><updated>2008-04-26T09:12:13+00:00</updated><id>https://simonwillison.net/2008/Apr/26/hackademixnet/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://hackademix.net/2008/04/26/mass-attack-faq/"&gt;Mass Attack FAQ&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Thousands of IIS Web servers have been infected with an automated mass XSS attack, not through a specific IIS vulnerability but using a universal XSS SQL query that targets SQL Server and modifies every text field to add the attack JavaScript. If an app has even a single SQL injection hole (and many do) it is likely to be compromised.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/iis"&gt;iis&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/massattack"&gt;massattack&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/sql"&gt;sql&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/sql-injection"&gt;sql-injection&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/sqlserver"&gt;sqlserver&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/xss"&gt;xss&lt;/a&gt;&lt;/p&gt;



</summary><category term="iis"/><category term="massattack"/><category term="security"/><category term="sql"/><category term="sql-injection"/><category term="sqlserver"/><category term="xss"/></entry></feed>