RE: HEAD request

["Ory Segal" <osegal () watchfire com>]

Hi,

Have you tried any other HTTP methods? did they work?

Usually, if an HTTP method is not allowed, you should receive an error
message (e.g. 403).

-Ory Segal
Watchfire ( http://www.watchfire.com )
  

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of vijay shetti
Sent: Saturday, September 09, 2006 11:14 AM
To: pen-test () securityfocus com
Subject: HEAD request

Hello all!!!

I am doing assessment of a web server

When I issue HEAD request using nc I don't get any response from the
webserver and I get disconnected after some time.
What should i conclude from that?Does it mean that the administrator has
blocked HEAD requests?

regards,
Vijay

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------