HTTP Method Scan

HTTP methods such as GET and POST enable website visitors and administrators to perform actions on a web server. But some HTTP methods are considered risky because they could enable an attacker to modify data or steal credentials from a server. While most websites have security controls for risky methods such as DELETE, PUT, CONNECT, and TRACE, these controls are not comprehensive and could allow arbitrary methods to get through. To confirm whether an attacker can bypass security controls, multiple requests with arbitrary or invalid methods are sent to a web server. If the web server allows these invalid methods, then the attacker learns about potential vulnerabilities to exploit.