search

mkrs2404 / tickets

0 stars 0 forks source link

HTTP TRACE method enabled (HTTP-TRACE:trace-request) found on honey.scanme.sh #22

Closed mkrs2404 closed 1 month ago

mkrs2404 commented 4 months ago

Details: HTTP-TRACE:trace-request matched at honey.scanme.sh

Protocol: HTTP

Full URL: https://honey.scanme.sh

Timestamp: Tue Apr 30 19:26:11 +0530 IST 2024

Template Information

Key Value
Name HTTP TRACE method enabled
Authors nodauf
Tags misc, generic
Severity info

Request

TRACE / HTTP/1.1
Host: honey.scanme.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.128 Safari/537.36 Edg/89.0.774.77
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

Response

HTTP/1.1 200 OK
Connection: close
Content-Length: 264
Content-Type: text/html
Date: Tue, 30 Apr 2024 13:56:11 GMT

TRACE / HTTP/1.1
Host: honey.scanme.sh
Accept: */*
Accept-Encoding: gzip
Accept-Language: en
Connection: close
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.128 Safari/537.36 Edg/89.0.774.77

References:

CURL command

curl -X 'TRACE' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.128 Safari/537.36 Edg/89.0.774.77' 'https://honey.scanme.sh'

Generated by Nuclei v3.2.5