312-50V9 · Question #339
Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?
The correct answer is D. http-methods. The Nmap NSE script 'http-methods' is specifically designed to enumerate allowed HTTP methods on a web server by sending OPTIONS requests and testing each method.
Question
Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?
Options
- Ahttp-git
- Bhttp-headers
- Chttp enum
- Dhttp-methods
How the community answered
(36 responses)- A3% (1)
- B3% (1)
- D94% (34)
Why each option
The Nmap NSE script 'http-methods' is specifically designed to enumerate allowed HTTP methods on a web server by sending OPTIONS requests and testing each method.
http-git detects exposed .git directories on web servers, not HTTP methods.
http-headers retrieves and displays the HTTP response headers from a server, not the allowed methods.
http-enum enumerates common web application directories and files (e.g., /admin, /login) using a wordlist, not HTTP method enumeration.
The http-methods NSE script queries a web server to discover which HTTP methods are enabled (GET, POST, HEAD, PUT, DELETE, TRACE, etc.) by issuing an OPTIONS request and optionally testing each method. Dangerous methods like PUT, DELETE, and TRACE can indicate misconfigurations that are exploitable by attackers. This script directly maps to the task described in the question.
Concept tested: Nmap NSE http-methods script for web enumeration
Source: https://nmap.org/nsedoc/scripts/http-methods.html
Topics
Community Discussion
No community discussion yet for this question.