When I used Chrome today via Burp, I noted that, apart from the tracking requests, three random HTTP HEAD requests are sent each time I open the browser.

enter image description here

I already found How to find a process that is sending HTTP HEAD requests for this and do understand its intended purpose.

However, I do wonder what would happen if an attacker eavesdropped these requests and answered to them. What are possible attack scenarios in this case, including scenarios where the intruder is already either on the host using the Chrome browser, or in the local network of the host.

  • Those are random requests made by Chrome to check on the ISP DNS. HEAD requests have no body and chrome can surely handle a header-only response from an eventual random server. I don't understand your attack scenarios at all, the worst thing that can happen if that you get the "Did you mean ...?" bar on chrome when doing single-word search through the address bar and show an attacker-controlled page but that would be true regardless of the head requests. May 15 '21 at 9:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.