Can I read HTTP Verb Tampering Overview on EtoBox?

HTTP Verb Tampering Overview by Brian Lebrón Rivera is a document available to read on EtoBox.

What is HTTP Verb Tampering Overview about?

This document discusses how web application authentication and authorization (VBAAC) mechanisms that rely on HTTP verb validation can be bypassed by tampering with the HTTP verb. Many implementations allow any verb not listed in security rules, rather than denying unlisted verbs. Attackers can use alternative verbs like HEAD or arbitrary strings to circumvent rules meant to restrict access based on verbs like GET and POST. The document provides examples of how this could allow unauthorized access and outlin

Author

Brian Lebrón Rivera

Language

EN