nuclei-templates/miscellaneous/trace-method.yaml

id: HTTP-TRACE

info:
  name: HTTP TRACE method enabled
  author: nodauf
  severity: info
  reference:
    - https://www.blackhillsinfosec.com/three-minutes-with-the-http-trace-method/
  tags: misc,generic

requests:
  - method: TRACE
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        name: trace-request
        part: body
        words:
          - "TRACE / HTTP"

  - method: OPTIONS
    path:
      - "{{BaseURL}}"

    matchers:
      - type: regex
        name: options-request
        part: header
        regex:
          - "(?i)Allow: [A-Z,]*TRACE"
Detect if trace method is enabled 2020-12-01 14:45:15 +00:00			`id: HTTP-TRACE`

			`info:`
			`name: HTTP TRACE method enabled`
			`author: nodauf`
			`severity: info`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`reference:`
			`- https://www.blackhillsinfosec.com/three-minutes-with-the-http-trace-method/`
Update trace-method.yaml 2021-08-11 08:01:11 +00:00			`tags: misc,generic`
Detect if trace method is enabled 2020-12-01 14:45:15 +00:00
			`requests:`
			`- method: TRACE`
			`path:`
Preparing for request clustering 2021-01-13 07:31:46 +00:00			`- "{{BaseURL}}"`
Detect if trace method is enabled 2020-12-01 14:45:15 +00:00
			`matchers:`
			`- type: word`
			`name: trace-request`
Miscellaneous template updates 2022-01-28 10:24:49 +00:00			`part: body`
Detect if trace method is enabled 2020-12-01 14:45:15 +00:00			`words:`
			`- "TRACE / HTTP"`

			`- method: OPTIONS`
			`path:`
Preparing for request clustering 2021-01-13 07:31:46 +00:00			`- "{{BaseURL}}"`
Detect if trace method is enabled 2020-12-01 14:45:15 +00:00
			`matchers:`
			`- type: regex`
			`name: options-request`
Miscellaneous template updates 2022-01-28 10:24:49 +00:00			`part: header`
Detect if trace method is enabled 2020-12-01 14:45:15 +00:00			`regex:`
			`- "(?i)Allow: [A-Z,]*TRACE"`