Other nomination

Cracking the Lens: Targeting HTTP's Hidden Attack-Surface

James Kettle · PortSwigger Research · 27 July 2017

Malformed Host headers and esoteric request headers make reverse proxies and other transparent intermediaries reveal themselves and misroute requests into internal networks. The same tricks reach intercepting middleboxes and caching proxies, yielding server-side request forgery, internal service access and poisoned caches at bug bounty scale.

Record

Researcher

James Kettle

Published by

PortSwigger Research

Date

27 July 2017

In the archive

• Nominated for the 2016–17 Top 10 Web Hacking Techniques

Related sources

• Research tool
• Companion probe
• Attribution side effects
• Endpoint-analysis follow-up
• Talk recording

Tags

• ssrf
• reverse-proxy
• http
• header-injection
• cache-poisoning
• proxy
• bug-bounty
• tooling
• owasp-a03-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host.