Server-Side

4 notes

HTTP Host Header InjectionOctober 11, 2025X-Cache: HIT The response came from the cache. The proxy had a stored copy and returned it directly · it did not contact the origin server. This is faster because the proxy…
HTTP Parameter Pollution (HPP & SSPP)January 31, 2026HTTP Parameter Pollution and Server-Side Parameter Pollution: concepts and a lab guide.
HTTP Request SmugglingSeptember 8, 2025HTTP request smuggling and HTTP/2 tunnelling: bypassing front-end restrictions.
Open Redirect – Practical GuideMarch 16, 2026If the server doesn't validate redirect uri , the authorization code is sent to evil.com .