nerdexam
EC-Council

312-50V11 · Question #473

Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?

The correct answer is D. http-methods. The Nmap NSE script http-methods enumerates the HTTP methods supported by a web server, such as GET, POST, PUT, DELETE, and TRACE.

Scanning Networks

Question

Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?

Options

  • Ahttp-git
  • Bhttp-headers
  • Chttp enum
  • Dhttp-methods

How the community answered

(59 responses)
  • B
    2% (1)
  • C
    3% (2)
  • D
    95% (56)

Why each option

The Nmap NSE script http-methods enumerates the HTTP methods supported by a web server, such as GET, POST, PUT, DELETE, and TRACE.

Ahttp-git

http-git checks whether a web server has an exposed .git directory, which could leak source code, not HTTP method configurations.

Bhttp-headers

http-headers retrieves and displays the HTTP response headers from a web server but does not enumerate or test which HTTP methods are permitted.

Chttp enum

http-enum is used to enumerate files and directories on a web server using a dictionary of common paths, not to detect supported HTTP methods.

Dhttp-methodsCorrect

The http-methods Nmap script sends an HTTP OPTIONS request to the target server and then tests each discovered method to determine which are allowed, directly identifying dangerous methods like PUT, DELETE, and TRACE that can expose the server to exploitation. This script is purpose-built for the use case described in the question.

Concept tested: Nmap NSE script for HTTP method enumeration

Source: https://nmap.org/nsedoc/scripts/http-methods.html

Topics

#nmap scripts#HTTP methods#web enumeration#http-methods

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice