Tyrion wants to view header content for footprinting: Connection status and content type, Accept-ranges and last-modified information, X-powered-by information, Web server in use and its version. Which tool should Tyrion use?

• A. Hydra
• B. Vangaurd enforcer
• C. AutoShun
• D. Burp suite

Answer: (D)

Viewing HTTP response headers is how you fingerprint a web server. The headers carry details like the server software and version, content type, Accept-Ranges support, Last-Modified timestamp, and X-Powered-By information. Burp Suite functions as an intercepting proxy with an HTTP history and a response inspector, so you can see these exact header fields for every request and response. This makes it ideal for footprinting, since you can confirm the web server and technology behind it directly from the headers without parsing page content. The other tools shown aren’t designed for inspecting HTTP headers or passive footprinting in this way, so they don’t fit this task.