Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I run some scans with nikto, and it tells me that HTTP trace method is enabled. What is HTTP trace method ? And what can be insecure about it?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

TRACE is a HTTP request method like GET and POST used for debugging. It echos back input to the user.

These websites outline insecurities: http://www.cgisecurity.com/questions/httptrace.shtml and http://publib.boulder.ibm.com/httpserv/ihsdiag/http_trace.html

share|improve this answer
These websites outline insecurities. –  mcandre Jun 23 '10 at 20:04
@mcandre Whaha! Thanks, it's corrected! ;) –  BloodPhilia Jun 23 '10 at 20:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.