Discover hidden assets using Host Header Injection

Подписаться 47 тыс.

Просмотров 10 тыс.

50% 1

In this video, I will learn how to find hidden assets and reduce duplicate reports using the Host Header Injection technique.
Download your FREE Web hacking LAB: thehackerish.c...
Read more on the blog: thehackerish.com
Support this work: thehackerish.c...
Facebook Page: / thehackerish
Follow us on Twitter: / thehackerish
Listen on Anchor: anchor.fm/theh... Listen on Spotify: open.spotify.c...
Listen on Google Podcasts: podcasts.googl...

Опубликовано:

4 окт 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 36

@ashiqurrahman275 3 года назад

Keep sharing your knowledge

@thehackerish 3 года назад

I will :)

@bjvercelli 3 года назад

Your channel is awesome bro. Congrats

@thehackerish 3 года назад

Thanks! Enjoy :)

@CyberNinja-p1t 9 месяцев назад

Thank you for very useful and understandable video

@bhavyseth5949 3 года назад

happy new year. its really nice video. thanks for sharing

@thehackerish 3 года назад

Thanks for your feedback! I really appreciate it :)

@sundar3357 3 года назад

Happy New year man. ☺️☺️

@bate5a710 3 года назад

Amazing Video, keep it up

@01zoso 3 года назад

Great video, thanks for sharing

@thehackerish 3 года назад

Welcome! Thanks for your feedback :)

@bertrandfossung1216 3 года назад

Thanks for this video. I learnt a great deal. I need to practice more and hopefully I will have a better grip on it.

@thehackerish 3 года назад

Go for it!

@bertrandfossung1216 3 года назад

Thanks for the encouragement. I'm looking forward to learn more from you.

@rahulhaxor2855 3 года назад

Thank you for this video... You are my favorite mentor 😍

@thehackerish 3 года назад

Wow, thank you!

@thuglife896 3 года назад

Fantastic lesson

@thehackerish 3 года назад

Enjoy!

@GauravSharma-ks9eq 3 года назад

🔥🔥🔥🔥

@elliot9066 3 года назад

love it

@Amazon-Insider 3 года назад

When you don't have burp pro :/ . great work !

@0xfsec 2 года назад

You can use interactsh from project discovery

@blackychan8175 2 года назад

Hi, thats was good video but how i get the internal ip from real life attack?

@thehackerish 2 года назад

Certificate transparency, or test addresses in known private ranges.

@davidwarokka882 2 года назад

what if my burp isn't a pro version ? can u tell us how to do it ?

@thehackerish 2 года назад

Buy a Pro version, the Community is also already great

@0xfsec 2 года назад

You can use interactsh from project discovery

@chinonsoiwundu5782 3 года назад

How can I typically get internal IP in the wild? Kindly let me know!

@thehackerish 3 года назад

reconnaissance of subdomains, data leaks, or use a subset of private IP space.

@chinonsoiwundu5782 3 года назад

@@thehackerish can you elaborate more on the last option? #subset of private IP....maybe you should recommend for me

@chinonsoiwundu5782 3 года назад

Also about reconnaissance of subdomains, from the example you gave we bruteforce an IP range...how do I reproduce it when I've a list of subdomains

@Cyber-jv8ve 3 года назад

Hello sir, I found a method to bypass host header and shows my only 302 found and my host.Is there any impact of this?I mean is there any way to affect the victim?

@thehackerish 3 года назад

Nope, you can't control the header in other users' browsers