312-50V11 · Question #473
Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?
The correct answer is D. http-methods. The Nmap NSE script http-methods enumerates the HTTP methods supported by a web server, such as GET, POST, PUT, DELETE, and TRACE.
Question
Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?
Options
- Ahttp-git
- Bhttp-headers
- Chttp enum
- Dhttp-methods
How the community answered
(59 responses)- B2% (1)
- C3% (2)
- D95% (56)
Why each option
The Nmap NSE script http-methods enumerates the HTTP methods supported by a web server, such as GET, POST, PUT, DELETE, and TRACE.
http-git checks whether a web server has an exposed .git directory, which could leak source code, not HTTP method configurations.
http-headers retrieves and displays the HTTP response headers from a web server but does not enumerate or test which HTTP methods are permitted.
http-enum is used to enumerate files and directories on a web server using a dictionary of common paths, not to detect supported HTTP methods.
The http-methods Nmap script sends an HTTP OPTIONS request to the target server and then tests each discovered method to determine which are allowed, directly identifying dangerous methods like PUT, DELETE, and TRACE that can expose the server to exploitation. This script is purpose-built for the use case described in the question.
Concept tested: Nmap NSE script for HTTP method enumeration
Source: https://nmap.org/nsedoc/scripts/http-methods.html
Topics
Community Discussion
No community discussion yet for this question.