Optionsbleed - HTTP OPTIONS method can leak Apache's server memory

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

If you're using the HTTP protocol in everday Internet use you are usually only using two of its methods: GET and POST. However HTTP has a number of other methods, so I wondered what you can do with them and if there are any vulnerabilities. One HTTP method is called OPTIONS. It simply allows asking a server which other HTTP methods it supports. The server answers with the "Allow" header and gives…

Read on blog.fuzzing-project.org ↗