HTTP Method Tampering

Definitions

1. A technique that abuses alternate or unexpected HTTP methods such as PUT, DELETE, or HEAD to bypass filters, reach hidden functionality, or trigger unsafe behavior. It often succeeds when security controls focus only on GET and POST while backend logic accepts more methods.

   In plain English: Using unexpected HTTP request methods to bypass web security checks.

   Example: "The admin route looked blocked until HTTP method tampering with `OPTIONS` and `PUT` exposed different behavior."

Related Terms

• WAF
• CORS
• SSRF
• HTTPS
• CORS Preflight
• Security Headers
• CAPTCHA
• HTTP Strict Transport Security
• Proxy Bypass