Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

How it works...

The Nmap options -p80 --script http-methods, http-trace --script-args http-methods.retest tell Nmap to launch the NSE scripts http-methods and http-trace on port 80 if a web server is detected, and to individually test each of the methods returned by the HTTP OPTIONS request.

http-methods was submitted by Bernd Stroessenreuther, and it sends an OPTIONS request to enumerate the methods supported by a web server. The script argument retest individually tests each of the available methods and returns the response code.

The script http-trace was written by me, and its purpose is to detect the availability of the HTTP method TRACE. It simply sends a TRACE request and looks for a status 200 code, or the same request is echoed back ...