HTTP Headers - need to check OPTIONS

Posted by chris on Server Fault See other posts from Server Fault or by chris
Published on 2010-02-04T15:49:37Z Indexed on 2010/03/08 20:38 UTC
Read the original article Hit count: 587

Filed under:

http-headers

|

options

|

iis6

I've received the results of a pen test and there is some unwanted exposure in the HTTP OPTIONS where the fact that Frontpage Server Extensions was available (now removed) was reported.

I need to run a check on the OPTIONS to see whether it has been removed. The test output from the report is below, I need to recreate it to establish that it has gone but don't know how to check the OPTIONS, I can only find tools that seem to check the "HEAD / HTTP/1.1".

Does anyone know how to test this - I'm running a Windows environment?

Many thanks

OPTIONS / HTTP/1.1
Host: www.website.com
HTTP/1.1 200 OK
Allow: OPTIONS, TRACE, GET, HEAD
Content-Length: 0
Server: Microsoft-IIS/6.0
Public: OPTIONS, TRACE, GET, HEAD, POST
MS-Author-Via: MS-FP/4.0
X-Powered-By: ASP.NET
MicrosoftOfficeWebServer: 5.0_Pub
Date: Fri, 01 Feb 2010 16:09:15 GMT

© Server Fault or respective owner

Related posts about http-headers

Amazon S3 Tips: Quickly Add/Modify HTTP Headers To All Files Recursively

as seen on Tech Dreams - Search for 'Tech Dreams'
Amazon S3 is an dead cheap cloud storage service that offers unlimited storage in pay as you use model. Recently we moved all the images and other static files(scripts & css) of Tech Dreams to Amazon S3 to reduce load on VPS server. Amazon S3 is cheap, but monthly bill will shoot up if images/static… >>> More
HTTP Headers - need to check OPTIONS

as seen on Server Fault - Search for 'Server Fault'
I've received the results of a pen test and there is some unwanted exposure in the HTTP OPTIONS where the fact that Frontpage Server Extensions was available (now removed) was reported. I need to run a check on the OPTIONS to see whether it has been removed. The test output from the report is below… >>> More
how to set httpheaders in asp.net mvc

as seen on Stack Overflow - Search for 'Stack Overflow'
I need to set http header for disabling ie (7-8) caching (it disturbs my ajax functionallity). I've tried inserting this code to the head of my site.master with no result - <META HTTP-EQUIV="Pragma" CONTENT="no-cache"> <META HTTP-EQUIV="Expires" CONTENT="-1"> How and where can I… >>> More
HTTPHeaders Added to Downloaded File - CocoaHTTPServer???

as seen on Stack Overflow - Search for 'Stack Overflow'
In an iPhone app where I use cocoahttpserver and take a sqlite database file from the iPhone and download it with a browser to my PC, when I look at the downloaded file using TextEdit, I see the text (below) at the end of the file. This text has apparently no effect on use of the database file, but… >>> More
HTTP Headers for Unknown Content-Length

as seen on Stack Overflow - Search for 'Stack Overflow'
I am currently trying to stream content out to the web after a trans-coding process. This usually works fine by writing binary out to my web stream, but some browsers (specifically IE7, IE8) do not like not having the Content-Length defined in the HTTP header. I believe that "valid" headers are supposed… >>> More

Related posts about options

no launcher, no dash, no unity, how to get back to my desktop?

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
FYI, I have tried these, but none worked as of yet! Please help! I must not want to reinstall Ubuntu precise: AskUbuntu:Unity Launcher missing AskUbuntu: Unity doesn't load Youtube:Restore missing launcher AskUbuntu:Unity 3D no longer works! Is there any other way to find a solution, any… >>> More
User interfirance, themes, Broken, Unreadable parts

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Arther going on a customizing spree my the desktop themes on unity got messed up I had installed Ubuntu tweak and unsettings so I removed them but the default themes and custom ones are still messed up I ran unity --reset and this is what I get: WARNING: Unity currently default profile, so switching… >>> More
Changing options in select box based on different select options

as seen on Stack Overflow - Search for 'Stack Overflow'
I have 2 select options. I want to change the drop down options in second select options based on what I select in first select options. How do I do that in jquery? <select id="Manage"> <option value="a">A</option> <option value="b">B</option> <option value="c">C</option> <select> Second… >>> More
problem with network-manager-pptp

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've a problema with the VPA CAble connection of my university... on the website of the university there's a .sh file that set all the variables of the connection in ETC/PPP/PEERS and another .sh file that call the connection...I'm on ubuntu 11.10 and when I run the setup.sh I have this error: impossible… >>> More
upgraded "Compiz' and "Unity", now no Unity 3D on screen

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Today when I logged in to my Ubuntu 12.04, the update manager told me of some upgrades. Compiz and Unity were in those upgrades. After I installed the upgrades, I can no longer get the Unity panel on the left side of screen or the systray at the top of screen. I now have to run Ubuntu 12.04 with… >>> More