nerdexam
EC-Council

312-50V13 · Question #20

When you are getting information about a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT

The correct answer is A. http-methods. To detect all available HTTP methods on a web server using the Nmap Scripting Engine, the http-methods script should be utilized.

Submitted by ahmad_uae· Mar 6, 2026Hacking Web Servers

Question

When you are getting information about a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the server. You can detect all these methods (GET, POST, HEAD, DELETE, PUT, TRACE) using NMAP script engine. What Nmap script will help you with this task?

Options

  • Ahttp-methods
  • Bhttp enum
  • Chttp-headers
  • Dhttp-git

How the community answered

(53 responses)
  • A
    89% (47)
  • B
    2% (1)
  • C
    2% (1)
  • D
    8% (4)

Why each option

To detect all available HTTP methods on a web server using the Nmap Scripting Engine, the `http-methods` script should be utilized.

Ahttp-methodsCorrect

The `http-methods` Nmap script is specifically designed to query a web server for supported HTTP methods (like GET, POST, HEAD, PUT, DELETE, TRACE) by sending an OPTIONS request and parsing the Allow header in the response, providing a comprehensive list of what the server allows.

Bhttp enum

`http-enum` is an Nmap script used to enumerate directories and files on a web server, not to list HTTP methods.

Chttp-headers

`http-headers` is an Nmap script used to retrieve and display HTTP headers from a web server, not to list the supported HTTP methods.

Dhttp-git

`http-git` is an Nmap script that attempts to find and download Git repositories, not to determine allowed HTTP methods.

Concept tested: Nmap scripting for HTTP method discovery

Source: https://nmap.org/nsedoc/scripts/http-methods.html

Topics

#Nmap scripts#HTTP methods#web server enumeration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V13 Practice