Nmap Development mailing list archives

Re: NSE Script http-methods.nse


From: David Fifield <david () bamsoftware com>
Date: Fri, 19 Feb 2010 16:16:44 -0700

On Fri, Feb 19, 2010 at 11:40:22PM +0100, Bernd Stroessenreuther wrote:
Hi again,

David wrote:
The uninteresting set {GET, HEAD, POST, OPTIONS, TRACE} just comes from
a quick observation of a handful of web servers. I welcome suggestions
of methods to be removed from or added to the set.

After analyzing responses of over 7000 webservers, I am sure: The set above is 
exactly the right one.

Here my little statistics
(Number of servers offering the method)

7053 OPTIONS
7047 HEAD
7047 GET
4399 TRACE
3795 POST
555 UNLOCK
555 LOCK
548 PROPFIND
548 COPY
348 DELETE
339 PUT
337 MOVE
335 PROPPATCH
335 PATCH
329 MKCOL
302 CONNECT

Wow, thanks, that's awesome!

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: