Skip to main content

Module phase1_recon

termivar_scanner::phases

Module phase1_recon 

Source
Expand description

§Phase 1: Reconnaissance & Port Scanning

Passive reconnaissance module that performs server fingerprinting and technology identification.

§Overview

This phase conducts non-intrusive reconnaissance on the target web server by analyzing HTTP response headers to identify server software, technologies, and known vulnerabilities.

§Features

  • Server Fingerprinting: Detects server software version from HTTP headers
  • Header Analysis: Extracts X-Powered-By, Server, and technology-revealing headers
  • CVE Matching: Identifies known vulnerabilities in detected software versions
  • Technology Stack Detection: Identifies backend frameworks and libraries

§Vulnerability Detection

Detects CVEs in:

  • Apache 2.4.49-2.4.50 (CVE-2021-41773: Path Traversal)
  • IIS versions with known RCE vulnerabilities
  • Framework-specific known CVEs

§Example

ⓘ
use termivar_scanner::{ScanPhase};

async fn example() {
    let phase = ReconPhase::new();
    // phase.execute(&ctx).await?;
}

§Performance

  • Single HTTP HEAD request per target
  • Timeout: 5 seconds
  • False positive rate: ~2% (based on header variance)

Structs§

ReconPhase
Server reconnaissance scanner for passive fingerprinting