HTTP/1.

0 BREAK THE CONNECTION AFTER THE ONE REQUEST

HTTP/1.1 - DOESNT BREAK THE CONNECTION , CONTINUES WITH THE SAME SESSION

HTTP request methods

GET - Parameters in URL
POST - Form submissions,data in message body
OPTIONS - List of methods supported for URL
HEAD - Response for GET but no message body
TRACE - Echo client request back for diagnostics
PUT - Store in URI
DELETE - Delete resource

examples

curl -v -X GET http://xyz.com

curl -v -X OPTIONS http://xyz.com

;
curl -v -X HEAD http://xyz.com

HEAD method security issues

-Authentication bypass
- HTTP verb Tampering

Http method testing using Nmap Metasploit

- cd /usr/share/nmap/scripts/
- nmap --scripts=http-methods.nse targetIP -n -p 80

seach for HTTP method scripts on nmap website

for checking if indivual method is working and getting response try this:

nmap --script=http-methods.nse --script-args http-methods.retest=1 taget_IP -n -p

80