What is HOST HEADER?
It is normal practice for a single web server to host multiple sites or web applications on the same IP address. The Host header determines which site or web application should process an incoming HTTP request.
The web server uses the Host header parameter value to dispatch the request to the appropriate site or web application. Each web application existing on the same IP address is commonly referred to as a virtual host.
Many web applications rely on the HTTP Host header to determine their own location. What many application administrators don't realize is that the HTTP Host header is controlled by the client. Hence it poses many risks and introduces various attack vectors, namely:
Example requests:
GET /index.html HTTP/1.1
Host: example.com
GET /index.html HTTP/1.1
Host: evil.com
Content Sniffing
Certain browsers, try to determine the content type and encoding of the response even when these properties are defined correctly...
Content Sniffing
Certain browsers, try to determine the content type and encoding of the response even when these properties are defined correctly...
Content Sniffing
Certain browsers, try to determine the content type and encoding of the response even when these properties are defined correctly...
Content Sniffing
Certain browsers, try to determine the content type and encoding of the response even when these properties are defined correctly...
