Detection of Gemini server software

Anna “CyberTailor” cyber at sysrq.in
Tue Jun 29 09:12:32 BST 2021


The specification leaves error messages in response field "meta" to
servers' developers. So in response to malfored request servers may
send "59 invalid request", "59 Error parsing URL!", "59 Invalid URL"
or something else.

Is it a security issue or just "creepy"?

Potential attackers can't detect vulnerable software versions using
this method, only its name. Also there aren't any known security flaws
except that naughty ".."

**

Bonus: nmap can be learned to detect gemini servers:
https://nmap.org/book/vscan-community.html

If you are interested, post your server's fingerprint here:
https://nmap.org/cgi-bin/submit.cgi?new-service


More information about the Gemini mailing list