Timeline for How to exploit HTTP Methods
Current License: CC BY-SA 3.0
8 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
May 1, 2021 at 0:31 | comment | added | DimiDak | Used burp to put file. I got "HTTP/1.1 405 Method Not Allowed". Would have been great if it had worked, but upvoted anyway. | |
Feb 14, 2021 at 14:02 | comment | added | bmiller | This talk drives me nuts. If you have unsecured endpoints running then it's not the verb that's at fault. | |
Jul 5, 2019 at 16:14 | comment | added | usr-local-ΕΨΗΕΛΩΝ | "Using the PUT method" on a poorly configured server. That' s not a problem with http method, that's a problem with the guy who (mis)configured the server to accept file uploads from anyone. I won't ask if that server accepts to execute scripts uploaded from unauthenticated users (horror face) | |
Jan 22, 2019 at 17:53 | comment | added | Mubin | Is this answer valid for RESTful services as well? | |
Jan 14, 2016 at 16:50 | history | edited | Jens Erat | CC BY-SA 3.0 |
Copy-edited.
|
Jan 14, 2016 at 16:47 | review | Late answers | |||
Jan 14, 2016 at 16:50 | |||||
Jan 14, 2016 at 16:32 | review | First posts | |||
Jan 14, 2016 at 16:40 | |||||
Jan 14, 2016 at 16:29 | history | answered | Dan Rad | CC BY-SA 3.0 |