HTTP Host Header Attacks Lab Breakdown: Host header authentication bypass

Publié le: 25 juillet 2022
sur la chaîne: Seven Seas Security

2,235

▹ Watch me Live on Twitch every Monday and Thursday! -   / garr_7

Portswigger Web Security Academy HTTP Host Header Attacks Lab: Host header authentication bypass - https://portswigger.net/web-security/...

Additional References for Further Exploration:

Garr's Walkthrough of HTTP Host Header Attacks Lab: Basic password reset poisoning -    • HTTP Host Header Attacks Lab Breakdown: Ba...
PortSwigger's Host Header Attacks Resource - https://portswigger.net/web-security/...

------------------------------------------------------------------------------
In this series, we take a look at Web Security Academy's Host Header Attacks labs and break them down. The goal is to break down the concepts to not only get to the solution, but talk about methodology and the mental steps we take in order to discover these vulnerabilities in the wild.

Timestamps:
0:00 Intro
0:20 Quick Recap
0:38 Lab Start: Walking Through the Application
1:03 Leveraging robots.txt To Find Admin Functionality
1:14 What Does Changing the Host Header Do?
2:11 Discovering the Final Payload
3:10 Quick Blurb About Burp's Match & Replace
3:30 Recap
3:54 Outro

------------------------------------------------------------------------------
Music:

“Friends”
Produced by Hyper Potions
   • Hyper Potions - Friends (Sonic Mania Openi...

“Morning Tea”
Produced by Jeff Kaale
   • Jeff Kaale - Morning Tea

“High Noon”
Produced by Bankrupt Beats
   • Video

“Ikebaby”
Produced by Robotprins
   • Ikebaby (feat. @rymdkraft )
------------------------------------------------------------------------------
Edited by Shikairi - https://shikairi.carrd.co/

Sur cette page du site, vous pouvez voir la vidéo en ligne HTTP Host Header Attacks Lab Breakdown: Host header authentication bypass durée heure minute seconde en bonne qualité , qui a été Téléchargé par l'utilisateur Seven Seas Security 25 juillet 2022, Partagez le lien avec vos amis et connaissances, sur youtube cette vidéo a déjà été regardée 2,235 fois et il a aimé 63 téléspectateurs. Bon visionnage!

40,576

118