XST

[Frederic Charpentier <fcharpen () xmcopartners com>]

hi all,
I am wondering if someone knowns a way to perform a xmlhttp request with 
TRACE on an iexplore 6 SP1.
Microsoft seems to block the use of the open("TRACE",url,false").

I saw on this list that IE can be tricked using 
open("\r\nTRACE",url,false), but it doesn't work with the http server I 
use (cisco web vpn gateway).

So, if there's another way to do that ...

--
Frederic Charpentier - Xmco Partners
Security Consulting / Pentest
web  : http://www.xmcopartners.com/tests-intrusion.html


-------------------------------------------------------------------------
This List Sponsored by: SpiDynamics

ALERT: "How A Hacker Launches A Web Application Attack!" 
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world 
examples of recent hacking methods such as: SQL Injection, Cross Site 
Scripting and Parameter Manipulation

https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------