nerdexam
EC-Council

312-50V9 · Question #339

Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?

The correct answer is D. http-methods. The Nmap NSE script 'http-methods' is specifically designed to enumerate allowed HTTP methods on a web server by sending OPTIONS requests and testing each method.

Scanning Networks

Question

Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?

Options

  • Ahttp-git
  • Bhttp-headers
  • Chttp enum
  • Dhttp-methods

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    94% (34)

Why each option

The Nmap NSE script 'http-methods' is specifically designed to enumerate allowed HTTP methods on a web server by sending OPTIONS requests and testing each method.

Ahttp-git

http-git detects exposed .git directories on web servers, not HTTP methods.

Bhttp-headers

http-headers retrieves and displays the HTTP response headers from a server, not the allowed methods.

Chttp enum

http-enum enumerates common web application directories and files (e.g., /admin, /login) using a wordlist, not HTTP method enumeration.

Dhttp-methodsCorrect

The http-methods NSE script queries a web server to discover which HTTP methods are enabled (GET, POST, HEAD, PUT, DELETE, TRACE, etc.) by issuing an OPTIONS request and optionally testing each method. Dangerous methods like PUT, DELETE, and TRACE can indicate misconfigurations that are exploitable by attackers. This script directly maps to the task described in the question.

Concept tested: Nmap NSE http-methods script for web enumeration

Source: https://nmap.org/nsedoc/scripts/http-methods.html

Topics

#NMAP#NSE scripts#HTTP methods#web scanning

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice