File http-cors

脚本使用类型: portrule
脚本所属分类: default, discovery, safe
脚本下载地址: http://nmap.org/svn/scripts/http-cors.nse

User Summary

Tests an http server for Cross-Origin Resource Sharing (CORS), a way for domains to explicitly opt in to having certain methods invoked by another domain.

The script works by setting the Access-Control-Request-Method header field for certain enumerated methods in OPTIONS requests, and checking the responses.

Script Arguments

http-cors.path

The path to request. Defaults to /.

http-cors.origin

The origin used with requests. Defaults to example.com.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

http.max-cache-size, http.max-pipeline, http.pipeline, http.useragent

Example Usage

执行格式

nmap -p 80 --script http-cors <target>

Script Output

80/tcp open
|_cors.nse: GET POST OPTIONS

Requires

• http
• nmap
• shortport
• stdnse
• table

Author: Toni Ruottu

License: VER007 整理 http://www.ver007.com