Questions tagged [host-header-injection]
Host header injection is an attack that fools the victim server to echo an incorrect host header.
4
questions
1
vote
2answers
469 views
Flow of a host header injection attack?
I am new to this field and would like to know how the flow happens in a host header injection attacks.
I believe it's as below:
Client generates the request.
Attacker manipulates the request and ...
0
votes
1answer
799 views
Host header injection attack with Spring boot embedded tomcat
Our application has been checked by PEN Test tool, and there are description of issue:
An attacker can redirect the application using the host header on the
below mentioned URL to redirect them ...
0
votes
0answers
2k views
Prevention of host header injection in ASP.NET?
How can we mitigate host header injection in ASP.NET? I have already configured application binding in IIS and set static hostname but still, the vulnerability exists.
3
votes
1answer
956 views
Is host header injection possible without cache or password reset?
I am a beginner in security and reading about host header injection. I tested an application for this vulnerability and it is possible there for some request, but the developer implemented no-cache, ...
