Snarf

  I have been using a program lately called snarf. I always use it with the -v option. I have incorporated it into my version of bashpodder and I also use it for all of my command line downloads.  Snarf is not included by default in ubuntu, so you will have to manually install it.

sudo apt-get install snarf

Here is an example of how I would use it.

 

snarf -v http://hydrogen.oshean.org/psw-airpwn.m4v

 

the output should look something like this

 

drew@laptop:~$ snarf -v http://hydrogen.oshean.org/psw-airpwn.m4v
HTTP/1.1 200 OK
Date: Tue, 09 Sep 2008 02:01:35 GMT
Server: Apache
Last-Modified: Mon, 09 Oct 2006 00:10:48 GMT
ETag: "1eb407a-3305d52-45299388"
Accept-Ranges: bytes
Content-Length: 53501266
Connection: close
Content-Type: text/plain; charset=iso-8859-1

http://hydrogen.oshe
an.org/psw-airpwn.m4v (52247K)
psw-airpwn.m4v            [####                 ]   10927K |  291.38K/ss

 

  As you can see the ###'s are the progress bar.  If you look at the beginning of the output you can see what kind of server it is running on.

  Snarf is a good tool for information gathering bacause snarf will usually output a lot of information about the server you are downloading from.  If you are trying to assess the server without doing say, an nmap or port scan you could just "snarf -v" the website's homepage.

  Let's try another one.

drew@laptop:~$ snarf -v twit.tv
HTTP/1.1 200 OK
Date: Tue, 09 Sep 2008 02:11:26 GMT
Server: Apache/2.0.52 (Red Hat)
X-Powered-By: PHP/5.2.6
Set-Cookie: SESS75d408f2ce389493e4955f4b0d50c557=gamt7i1jcg52e1c60qd15aksa0; expires=Thu, 02 Oct 2008 05:44:46 GMT; path=/; domain=.twit.tv
Last-Modified: Tue, 09 Sep 2008 02:06:41 GMT
ETag: "1a906da29faa3716f27d19c6d8073eab"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Connection: close
Content-Type: text/html; charset=utf-8

http://twit.tv (unknown size)
index.html                [-]      32K
33753 bytes transferred in 0.22 sec (147.33k/sec)

  Here we can see that the server is running apache version 2.0.52 on a red hat machine.  If you know some redhat or apache vulnerabilities ...

 

 

That is it for now.

Good luck and enjoy.

 

Drew