Detect enabled HTTP OPTIONS methods
Information disclosed from this page can be used to gain additional information about the target system.
Short Info
Level
Low
Type
Single Scan
Can be used by
Everyone
Estimated Time
10 sec
Scan only one
Url
Parent Category
Detect enabled HTTP OPTIONS methods Detail
OPTIONS is a diagnostic method which is mainly used for debugging purpose. This HTTP method basically reports which HTTP Methods that are allowed on the web server. In reality, this is rarely used for legitimate purposes, but it does grant a potential attacker a little bit of help and it can be considered a shortcut to find another hole.
Try it yourself,
control security posture
control security posture