Re: http TRACE option

[Bipin Upadhyay <muxical.geek () gmail com>]

pentestr wrote:
> Hi,
> what is the issue if TRACE option is enabled in web servers ? Nessus 
> results always display it as warning.
> any idea...
XST (Cross Site Tracing)

Links:
www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf
http://www.owasp.org/index.php/Testing_for_HTTP_Methods_and_XST

[SNIPPED]

Regards,
Bipin Upadhyay.
http://projectbee.org

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------