Why if a server response contain both Public: TRACE and Allow: TRACE then responds with 405 NOT allowed?
SCENARIO:
I’m testing a web application. To test if TRACE is enabled I used both
nmap –script http-methods target.com
and
curl -k -i -X OPTIONS target.com
After running the former I get
443/tcp open https
| http-methods:
| Supporte… Continue reading Why if a server response contain both Public: TRACE and Allow: TRACE then responds with 405 NOT allowed?