# HTTP Verbs ### Get It is used to request a resource. We can also pass arguments to webserver in url using `?` *** ### Post It is used to submit HTML form data. POST parameters should be in message body *** ### Head It asks header of the response instead of also getting the body. *** ### Put It is used to upload a file to the server. It is very dangerous if allowed and misconfigured ``` PUT /path/to/destination HTTP/1.1 Host: www.example.com ``` #### Exploiting the PUT Method You have to specify the size of file that you are sending ```bash $ wc -m payload.php 20 payload.php ``` * -m tells us how long in bytes our payload is. ```bash $ nc victim_ip port PUT /payload.php HTTP/1.0 Content-type: text/html Content-length: 20 ``` * HTTP/1.0 allows us to skip the **Host:** header *** ### Delete It is used to remove a file from the server. It is also very dangerous which can lead to denial of service and data loss ``` DELETE /path/to/destination HTTP/1.1 Host: www.example.com ``` *** ### Options It is used to query web server for enabled http verbs. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/web-attacks/http-verbs.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.