Skip to content

HTTP Cheat Sheet

HTTP Authentication Types

  • Digest Authentication (uses htdigest)

- susceptible to MITM attack!

  • Integrated Windows Authentication

- will not function over proxy

  • Form-Based Authentication

- not inherently encrypted, often poor implementation

HTTP Response Codes

Informational Response Codes (1xx)

  • 100 - Continue

  • 101 - Switching Protocols

  • 102 - Processing

Success Response Codes (2xx)

  • 200 - OK

  • 201 - Created

  • 202 - Accepted

  • 203 - Non-authoritative Info

  • 204 - No Content

  • 205 - Reset Content

  • 206 - Partial Content

  • 207 - Multi-status

  • 208 - Already Reported

  • 226 - IM Used

  • 250 - Low Storage Space

Redirection Response Codes (3xx)

  • 300 - Multiple Choices

  • 301 - Moved Permanently

  • 302 - Found

  • 303 - See Other

  • 304 - Not Modified  

  • 304 - Not Modified  

  • 305 - Use Proxy

  • 307 - Temporary Redirect

  • 308 - Permanent Redirect

Client Error Response Codes (4xx)

  • 400 - Multiple Choices

  • 401 - Moved Permanently

  • 402 - Found

  • 403 - See Other

  • 404 - Multiple Choices

  • 405 - Moved Permanently

  • 406 - Found

  • 407 - See Other

  • 408 - Found

  • 409 - See Other

  • 410 - Not Modified

  • 411 - Use Proxy

  • 412 - Temporary Redirect

  • 413 - Permanent Redirect

  • 414 - Not Modified

  • 415 - Use Proxy

  • 416 - Temporary Redirect

  • 417 - Permanent Redirect

  • 418 - Temporary Redirect

Server Error Response Codes (5xx)

  • 500 - Internal Server Error

  • 501 - Not Implemented

  • 502 - Bad Gateway

  • 503 - Service Unavailable

  • 504 - Gateway Timeout

  • 505 - HTTP Ver Not Supported

  • 506 - Variant Also Negotiates

  • 507 - Insufficient Storage

  • 508 - Loop Detected

  • 509 - Bandwidth Limited

  • 510 - Not Extended

  • 511 - Network Auth Required

  • 550 - Permission Denied

  • 551 - Option Not Supported

  • 598 - Network Read Timeout Error

  • 599 - Network Connect Timeout Error