[WEB SECURITY] XST

[Frederic Charpentier <fcharpen@xxxxxxxxxxxxxxxx>]

hi all,
I am wondering if someone knowns a way to perform a xmlhttp request with 
TRACE on an iexplore 6 SP1.
Microsoft seems to block the use of the open("TRACE",url,false").

I saw on this list that IE can be tricked using 
open("\r\nTRACE",url,false), but it doesn't work with the http server I 
use (cisco web vpn gateway).

So, if there's another way to do that ...

--
Frederic Charpentier - Xmco Partners
Security Consulting / Pentest
web  : http://www.xmcopartners.com/tests-intrusion.html


---------------------------------------------------------------------
The Web Security Mailing List
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives
http://www.webappsec.org/lists/websecurity/archive/