webappsec October 2008 archive
Main Archive Page > Month Archives  > webappsec archives
webappsec: user agent string database

user agent string database

From: Robin Wood <dninja_at_nospam>
Date: Thu Oct 02 2008 - 08:34:23 GMT
To: webappsec@securityfocus.com


Hi
Can anyone recommend a good, up-to-date, searchable UA database? I've just googled a few but the ones I've found have either been out of date or just long lists of known ones with no real descriptions of what they relate to.

I'm after something that will take a string such as:

"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; FunWebProducts; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" and suggest what browser, OS, service pack/patch level and what extras they have installed. I know that it can't be 100% accurate and some parts are obvious (e.g. browser) but it would be nice to just throw the string into something and have a description come back.

If it doesn't exist, would anyone else find it useful? Building a system to do this wouldn't be too hard, it would be populating it that would take some time and effort.

Robin



Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F