Shulou(Shulou.com)06/02 Report--

How to XSS through the HTTP header, I believe that many inexperienced people do not know what to do. Therefore, this paper summarizes the causes and solutions of the problem. Through this article, I hope you can solve this problem.

In some cases, the information passed in one of the HTTP headers of the application is not properly cleared and output to the other end or the other end of the requested page, resulting in a XSS situation.

Unfortunately, once an attacker cannot get the victim to edit his own HTTP header in an actual XSS attack, these situations can only be exploited if the attacker's payload is still stored in some way.

The first scenario we might think of is the classic case in which some information in the HTTP header that we can control is stored in a database and then retrieved on the same page, anywhere else in the application, or even in another inaccessible system.

Exercise:

Https://brutelogic.com.br/lab/header.php

All of our request headers are displayed here in JSON format. This is an inference that in the real world, it may only appear one or two of them. This is just to simplify the code, because the code is a single line of code (PHP) that can be easily reproduced:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.