Nick Chua Logo

Web Security

Showing 2 of 2
Jan 13, 20262 min read
Web Security

Discover hidden vhosts via HTTP/1.0 Host fallback, then SSRF localhost to leak a flag-bearing header through /think.

Jan 9, 20263 min read