Listing supported HTTP methods
Web servers support different HTTP methods according to their configuration and software, and some of them could be dangerous under certain conditions. Pentesters need a way of quickly listing the available methods. The NSE script http-methods allows them not only to list these potentially-dangerous methods but also to test them.
This recipe shows you how to use Nmap to enumerate all of the HTTP methods supported by a web server.
How to do it...
Open a terminal and enter the following command:
$ nmap -p80,443 --script http-methods scanme.nmap.org
The results are shown for every web server detected on ports 80 or 443:
Nmap scan report for scanme.nmap.org (74.207.244.221) Host is up (0.11s latency). PORT STATE SERVICE 80/tcp open http |_http-methods: GET HEAD POST OPTIONS 443/tcp closed https
How it works...
The argument -p80,443 --script http-methods makes Nmap launch the http-methods script if a web server is found ports 80 or 443 (-p80,443). The NSE script...
