HTTP Host Header Attacks Lab Breakdown: Basic password reset poisoning

Опубликовано: 17 Июнь 2022
на канале: Seven Seas Security

7,188

203

▹ Watch me Live on Twitch every Monday and Thursday! -   / garr_7

Portswigger Web Security Academy HTTP Host Header Attacks Lab: Basic password reset poisoning - https://portswigger.net/web-security/...

Additional References for Further Exploration:

PortSwigger's Host Header Attacks Resource - https://portswigger.net/web-security/...

------------------------------------------------------------------------------
In this series, we take a look at Web Security Academy's Host Header Attacks labs and break them down. The goal is to break down the concepts to not only get to the solution, but talk about methodology and the mental steps we take in order to discover these vulnerabilities in the wild.

Timestamps:
0:00 Intro
0:14 Quick Host Header Breakdown
0:45 What is the Host Header Used For?
1:36 What is Host Header Injection?
2:35 Lab Start: Walking Through Password Reset Workflow
3:56 What Does Changing the Host Header Do?
4:37 Poisoning the Password Reset Link and Targeting Carlos With Our Payload
5:54 Recap
6:41 Outro

------------------------------------------------------------------------------
Graphics Used in Video:

Virtual Host Routing: https://www.ssl.com/article/sni-virtu...

Load Balancers: https://www.nginx.com/resources/gloss...

------------------------------------------------------------------------------
Music:

“Friends”
Produced by Hyper Potions
   • Hyper Potions - Friends (Sonic Mania Openi...

“Morning Tea”
Produced by Jeff Kaale
   • Jeff Kaale - Morning Tea

“High Noon”
Produced by Bankrupt Beats
   • Video

“Ikebaby”
Produced by Robotprins
   • Ikebaby (feat. @rymdkraft )

На этой странице сайта вы можете посмотреть видео онлайн HTTP Host Header Attacks Lab Breakdown: Basic password reset poisoning длительностью часов минут секунд в хорошем качестве, которое загрузил пользователь Seven Seas Security 17 Июнь 2022, поделитесь ссылкой с друзьями и знакомыми, на youtube это видео уже посмотрели 7,188 раз и оно понравилось 203 зрителям. Приятного просмотра!

348