hunt-host-header

SKILLWorkflowcommunauté
v0.0.0elementalsoulsMITMis à jour il y a 5 jSource →

Hunt Host Header Injection — password reset poisoning → ATO, web cache poisoning via unkeyed Host/X-Forwarded-Host, routing-based SSRF (Host picks upstream → cloud metadata/internal services), path-override SSRF/ACL-bypass (X-Original-URL/X-Rewrite-URL), OAuth redirect_uri/issuer poisoning, and abso

Community-submitted skill. Not yet reviewed by the Forge team. Full prompt content may not be available.Request review →
4kÉtoiles du dépôt
1Clients
1Formats
il y a 5 jDernière mise à jour
Skill
Auteurelementalsouls
Version0.0.0
LicenceMIT
CatégorieWorkflow
Formatsskill.md
PromptOuvrir (voir l’onglet Prompt)
Compatibilité
Claude✓ Pris en charge
Cursor—
Copilot—
ChatGPT—
Gemini—
À propos

Hunt Host Header Injection — password reset poisoning → ATO, web cache poisoning via unkeyed Host/X-Forwarded-Host, routing-based SSRF (Host picks upstream → cloud metadata/internal services), path-override SSRF/ACL-bypass (X-Original-URL/X-Rewrite-URL), OAuth redirect_uri/issuer poisoning, and absolute-URL link poisoning in emails. High to Critical when it reaches ATO or mass cache poisoning. Bui

Mots-clés
skillclaude