Routing-based SSRF via Host Header
This post talks about how the Host header becomes an SSRF primitive, how front-end routing works, why trusting the Host header breaks the trust boundary between proxy and back-end, …
Read More →
Write-ups
In-depth research and notes on security technologies, tradecraft, and lab write-ups.