HTTP header injection: Difference between revisions

Revision as of 20:29, 5 June 2008

Latest revision as of 10:05, 17 May 2025

(67 intermediate revisions by 50 users not shown)

Line 1:

{{Short description|Web application security vulnerability}}

{{Citation style|date=March 2024}}

{{HTTP}}

'''HTTP header injection''' is a general class of [[web application]] [[security vulnerability]] which occurs when [[Hypertext Transfer Protocol]] ([[HTTP]]) [[list of HTTP headers|headers]] are dynamically generated based on user input. [[Header (computing)|Header]] injection in HTTP responses can allow for [[HTTP response splitting]], and[[session fixation]] via the Set-[[HTTP cookie|Cookie]] header, [[Crosscross-site scripting]] (XSS), and malicious redirect attacks. HTTPvia headerthe injection___location isheader. a[[XSS]] relativelyattacks newcan areabe forblocked web-basedwith attacks,the anduse hasof primarilyan been[[Browser pioneeredextension|extension]] bysuch Amitas Klein[[NoScript]] inor hisMalwarebytes workBrowser Guard on request/responseyour smuggling/splitting[[Web browser|browser]].

== Sources ==

* [https://dl.packetstormsecurity.net/papers/attack/Aspect_File_Download_Injection.pdf File Download Injection]

* [https://www.owasp.org/index.php/HTTP_Response_Splitting OWASP HTTP request Splitting]

* [https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/15-Testing_for_HTTP_Splitting_Smuggling OWASP Testing for HTTP Splitting/Smuggling]

* [https://regilero.github.io/security/english/2015/10/04/http_smuggling_in_2015_part_one/ HTTP Smuggling in 2015]

* [https://noscript.net NoScript Official Website]

== See also ==

*[http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042358.html HTTP Response Smuggling]

* [[HTTP request smuggling]]

*[http://palisade.plynt.com/issues/2006Sep/http-request-smuggling/ HTTP Request Smuggling]

*[http://www.webappsec.org/lists/websecurity/archive/2008-04/msg00003.html File Download Injection]

==Useful ToolsReferences==

{{Reflist}}

* [http://www.lucid-edge.com HTTP Sniffer and HTTP Analyzer (Proxy and tunnel based)]

* [http://wapiti.sf.net Wapiti Open Source Header, XSS, SQL and LDAP injection scanner]

[[Category:Web security exploits]]

[[Category:HTTPHypertext Transfer Protocol headers]]

{{internet-stub}}

{{internetWeb-stub}}

[[de:Header-Injection]]