HTTP Methods Discloser
Summary: PortSwigger's BApp Store lists an extension by Ashkan Jahanbakhsh, version 1.0, last updated 06 May 2021, that sends an OPTIONS request to determine whether HTTP methods other than the original request are available. When other methods are found, the request in Proxy/HTTP History is highlighted and the available methods are written into the Comment column, with an estimated overall system impact rated Low.
Why it matters: The extension surfaces HTTP methods a server will accept beyond the one you tested, and PortSwigger states it makes no warranty about third-party extensions' quality or usefulness - so the finding still needs a human to judge whether those methods should be exposed.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026