Injection: Host Header Injection (Redirect)¶

Identifier: host_header_injection_redirect

Scanner Support¶

Description¶

Host Header Injection (Redirect) happens when an application trusts a client-controlled Host or X-Forwarded-Host header to build a redirect target, so an attacker can redirect victims to an arbitrary host.

How we test: We replay requests with the Host and X-Forwarded-Host headers rewritten to a unique attacker-controlled marker host, then check whether that marker appears in the Location response header. A match means the application redirects based on the untrusted header.

References:

• https://portswigger.net/web-security/host-header

Configuration¶

Example¶

Example configuration:

---
security_tests:
  host_header_injection_redirect:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.