安裝nmap
yum install nmap
查看web server支持的http methods
u02 ~]$ nmap -p 443 --script http-methods www.somewhere.cn Starting Nmap 6.40 ( http://nmap.org ) at 2017-05-24 17:16 CST Nmap scan report for www.somewhere.cn (60.20.31.68) Host is up (0.0065s latency). PORT STATE SERVICE 443/tcp open https | http-methods: GET HEAD POST PUT DELETE TRACE OPTIONS PATCH | Potentially risky methods: PUT DELETE TRACE PATCH |_See http://nmap.org/nsedoc/scripts/http-methods.html Nmap done: 1 IP address (1 host up) scanned in 0.43 seconds
如果web server不支持OPTIONS方法, 則會返回
u02 ~]$ nmap -p 443 --script http-methods m.somewhere.cn Starting Nmap 6.40 ( http://nmap.org ) at 2017-05-24 17:15 CST Nmap scan report for m.somewhere.cn (60.25.311.71) Host is up (0.0070s latency). PORT STATE SERVICE 443/tcp open https |_http-methods: No Allow or Public header in OPTIONS response (status code 403) Nmap done: 1 IP address (1 host up) scanned in 0.62 seconds