Web Security
Discover hidden vhosts via HTTP/1.0 Host fallback, then SSRF localhost to leak a flag-bearing header through /think.
Back to categoriesCategory
Web Security
Posts1
View all postsShowing 1 of 1
Jump to:Dusty Alleys | Web | HackTheBox
Jan 9, 20263 min read