"HTTP Verb Tampering in ASP.NET"

We're only a few days into 2016, and it didn't take long for me to see a web application vulnerability that has been documented for over 10 years: HTTP Verb Tampering. This vulnerability occurs when a web application responds to more HTTP verbs than necessary for the application to properly function. Clever attackers can exploit … Continue reading HTTP Verb Tampering in ASP.NET

via AppSec Street Fighter - SANS Institute http://bit.ly/1P5e2HH