使用nmap查看web服务支持的http methods

安装nmap

yum install nmap

查看web server支持的http methods

u02 ~]$ nmap -p  --script http-methods www.somewhere.cn

Starting Nmap 6.40 ( http://nmap.org ) at 2017-05-24 17:16 CST
Nmap scan report for www.somewhere.cn (60.20.31.68)
Host is up (.0065s latency).
PORT    STATE SERVICE
/tcp open  https
| http-methods: GET HEAD POST PUT DELETE TRACE OPTIONS PATCH
| Potentially risky methods: PUT DELETE TRACE PATCH
|_See http://nmap.org/nsedoc/scripts/http-methods.html

Nmap done:  IP address ( host up) scanned in 0.43 seconds

如果web server不支持OPTIONS方法, 则会返回

u02 ~]$ nmap -p  --script http-methods m.somewhere.cn

Starting Nmap 6.40 ( http://nmap.org ) at 2017-05-24 17:15 CST
Nmap scan report for m.somewhere.cn (60.25.311.71)
Host is up (.0070s latency).
PORT    STATE SERVICE
/tcp open  https
|_http-methods: No Allow or Public header in OPTIONS response (status code )

Nmap done:  IP address ( host up) scanned in 0.62 seconds