NGINX / TRACE HTTP

Question

NGINX / TRACE HTTP

#1 da (3 voti)

3

Ho un server http Nginx con HTTP TRACE abilitato.

Un singolo nmap --script=http-methods.nse host.name fornisce questo risultato:

Not shown: 988 closed ports 
PORT     STATE    SERVICE   VERSION 
[...] 
80/tcp   open     http                   nginx 
  | http-methods: GET HEAD POST OPTIONS TRACE
  | Potentially risky methods: TRACE
  |_See http://nmap.org/nsedoc/scripts/http-methods.html
[...]
443/tcp  open     ssl/http   Apache httpd 2.2.15 ((CentOS))
[...] 
Service Info: OS: Unix

E il risultato Telnet :

telnet host.name 80 Trying host.name... Connected to host.name. 
Escape character is '^]'.
OPTIONS / HTTP/1.1
Host: foo

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Sep 2012 03:23:23 GMT
Content-Type: httpd/unix-directory
Connection: keep-alive
Allow: GET,HEAD,POST,OPTIONS,TRACE
Content-Length: 0


telnet host.name 80 Trying host.name... Connected to host.name. 
Escape character is '^]'. 
TRACE / HTTP/1.1 
Host: foo

**HTTP/1.1 405 Not Allowed** 
Server: nginx 
Date: Wed, 26 Sep 2012 03:27:09 GMT 
Content-Type: text/html Content-Length: 166 
Connection: close

Perché non posso ricevere una risposta di 200?

linux apache exploit vulnerability-scanners

posta J.E. 26.09.2012 - 05:02

fonte

1 risposta

Leggi altre domande sui tag linux apache exploit vulnerability-scanners

Denial of Services basato su SSL a causa di Message Digest DPAPI attacco offline cracking password di Windows?

score 3 · Accepted Answer

Ho controllato la fonte e ho trovato questo commento nel file CHANGES:

Changes with nginx 0.5.17 (02 Apr 2007)
*) Change: now nginx always returns the 405 status for the TRACE method.

E in ngx_http_request.c (versione corrente), una rapida verifica della traccia risulta nelle righe 1582-1587:

 if (r->method & NGX_HTTP_TRACE) {
        ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
                      "client sent TRACE method");
        ngx_http_finalize_request(r, NGX_HTTP_NOT_ALLOWED);
        return NGX_ERROR;
    }

Sembra che restituisca sempre NGX_HTTP_NOT_ALLOWED se ho seguito correttamente il codice.