PRiTi.EX·Nov 4Lab7: Password reset poisoning via dangling markupCapture Carlos’s newly generated password from the password-reset email and use it to log in to his account.
PRiTi.EX·Nov 3Lab6: Host validation bypass via connection state attackThe objective is to exploit incorrect Host header validation by reusing a previously validated HTTP connection to access the internal admin…
PRiTi.EX·Nov 2Lab5: SSRF via flawed request parsingIn this Lab it accepts the absolute URL instead of the Host header. To solve the lab follow me.
PRiTi.EX·Oct 30Lab2: Host header authentication bypass — HTTP Host header attacksThis lab makes an assumption about the privilege level of the user based on the HTTP Host header. I solved it using a simple trick follow…
PRiTi.EX·Oct 27Lab1: Basic password reset poisoning — HTTP Host header attacksTo solve this takes more time because i unable to understand the basic of functionality so i write it from basic so every one can…
0x7ipher·Oct 20OAuth Redirect URI Manipulation via X-Forwarded-Host InjectionHow an Untrusted HTTP Header Influenced an Azure AD OAuth Callback
BugWraith (Lokesh)·Aug 30I sent one HTTP request and hijacked a password reset link → ATOA single “redirect” parameter, an attacker-controlled Collaborator domain, and a full account takeover. Welcome to another password reset…A response icon1A response icon1
InInfoSec Write-upsbykjulius·Aug 211-Click ATO Via Host Header Injection: Exploiting Password Reset Poisoning.“Some of the most impactful vulnerabilities don’t begin with complex exploitation chains. Sometimes, they begin with a single HTTP header”.A response icon1A response icon1
