Penetration Testing mailing list archives
Re: http TRACE option
From: "Florencio Cano" <florencio.cano () gmail com>
Date: Tue, 22 Jan 2008 13:51:58 +0100
what is the issue if TRACE option is enabled in web servers ?
Here you have info about it: "XST Strikes Back", Amit Klein, BugTraq posting, January 25th, 2006 http://www.securityfocus.com/archive/1/423028 "Cross Site Tracing", Jeremiah Grossman, WhiteHat Security whitepaper, January 20th, 2003 http://www.cgisecurity.com/whitehat-mirror/WhitePaper_screen.pdf ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- http TRACE option pentestr (Jan 18)
- Re: http TRACE option jeffrey rivero (Jan 22)
- Re: http TRACE option Tim (Jan 22)
- Re: http TRACE option Florencio Cano (Jan 22)
- Re: http TRACE option Campbell Murray (Jan 22)
- Re: http TRACE option Chris McNab (Jan 22)
- RE: http TRACE option Maxime Ducharme (Jan 22)
- Re: http TRACE option Gleb Paharenko (Jan 22)
- Re: http TRACE option Alexander Bondarenko (Jan 22)
- Re: http TRACE option José M. Palazón Romero (Jan 22)
- Re: http TRACE option rajat swarup (Jan 22)
- RE: http TRACE option benoni.martin (Jan 22)
- Re: http TRACE option Bipin Upadhyay (Jan 22)
- Re: http TRACE option Trancer (Jan 22)