Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've received the results of a pen test and there is some unwanted exposure in the HTTP OPTIONS where the fact that Frontpage Server Extensions was available (now removed) was reported.

I need to run a check on the OPTIONS to see whether it has been removed. The test output from the report is below, I need to recreate it to establish that it has gone but don't know how to check the OPTIONS, I can only find tools that seem to check the "HEAD / HTTP/1.1".

Does anyone know how to test this - I'm running a Windows environment?

Many thanks

OPTIONS / HTTP/1.1
Host: www.website.com
HTTP/1.1 200 OK
Allow: OPTIONS, TRACE, GET, HEAD
Content-Length: 0
Server: Microsoft-IIS/6.0
Public: OPTIONS, TRACE, GET, HEAD, POST
MS-Author-Via: MS-FP/4.0
X-Powered-By: ASP.NET
MicrosoftOfficeWebServer: 5.0_Pub
Date: Fri, 01 Feb 2010 16:09:15 GMT
share|improve this question

3 Answers 3

up vote 3 down vote accepted

There is a website I use a lot to do different network related tests. Especially if I want to be able to look at something from outside my network. It's http://www.network-tools.com
They have an option for HTTP headers which should give you the info you're looking for.

EDIT:
After some looking online you can do it manually through telnet with the following commadns:

# telnet www.example.com 80
Connected to www.example.com.
Escape character is '^]'.

OPTIONS * HTTP/1.1
Host: www.example.com

Press enter twice after the last line.

Though when I tested this on my site I received the same info.

share|improve this answer
    
Many thanks - the telnet returned the output I was looking for –  Chris Feb 5 '10 at 10:29

You can use a network testing tool like nessus to verify your setup.

share|improve this answer

I like to use this Free HTTP Headers Testing tool to send, get and custom HTTP headers

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.