Yeah, I need to write some footprint "triggers" for a little project of mine so I decided to see what IIS 6.0 does when you do the following:

TheHorse13@Slack9:/home# telnet win2k3 80

......
GET /HTTP/1.0
<enter>
<enter>

The output was surprising. Instead of the typical header with 404 errors, etc., I received the HTML 4.1 tag and some other useless info.

I thought, well, let's see what netcat has to say.

TheHorse13@Slack9:/home#nc -vv win2k3 80
<enter>
win2k3 [IP address] 80 (http) open: unknown socket error
Same output as telnet - a bunch of HTML version tags and other useless HTML.

Now, I know that NMAP will identify this without a problem but I wanted to see if others have received similar results against a W2K3 server running IIS6.0

--TH13