testing-for-host-header-injection

Test for host header injection by sending manipulated HTTP Host and alternative headers to a target URL. This Skill checks for reflection in responses and verifies password reset poisoning, cache poisoning, and SSRF vulnerabilities behind reverse proxies.

HTTP host header poisoning exploits applications that trust the Host header to generate links, enabling attackers to manipulate password reset emails and steal reset tokens by routing requests through attacker-controlled domains.

Verify web cache poisoning by injecting malicious host headers and checking if cache layers store and serve the poisoned response to subsequent users. This Skill confirms whether reverse proxies and CDNs honor attacker-controlled headers.

Yes, this Skill leverages the Python requests library to send crafted HTTP requests with manipulated host headers. It probes backend request flows to identify internal SSRF vulnerabilities exposed via host header injection.

Yes, this Skill is designed for assessing targets behind reverse proxies, CDNs, and load balancers. It performs virtual host enumeration and alternative header probing to detect host header routing abuse in these infrastructure environments.

Enumerate virtual hosts by systematically sending varying HTTP Host header values and analyzing response differences. This Skill automates vhost discovery alongside reflection checks to map virtual host exposure and internal routing.