Hi list !,<br><br> While performing a pentest I found the following:<br><br>mafo:/home/joshua/$ nc XXXXX 80 -v -v<br>GET <a href="http://www.XXXXXX.com/YYYYYY">http://www.XXXXXX.com/YYYYYY</a> HTTP/1.0<br><br><br>HTTP/1.0 404 Not Found
<br>Date: Fri, 17 Nov 2006 13:40:47 GMT<br>Content-Length: 0<br>Content-Type: image/gif<br>Server: Apache/2.0.54 (Unix)<br><br> The thing to notice here is the "Content-Type: image/gif" header returned by the server. The requests that return this header are all requests that dont end in .html ; for example
<a href="http://www.XXXXXX.com/f00.html">http://www.XXXXXX.com/f00.html</a> will return a normal header, but <a href="http://XXXXXX.com/bar.txt">http://XXXXXX.com/bar.txt</a> will return a "Content-Type: image/gif". Does anyone have a clue about this configuration ? What is it for ?
<br><br clear="all">Cheers,<br>-- <br>Joshua Tagnore