logo
HackAllTheThings
Head Smuggling
Initializing search
    GitHub
    GitHub
    • Hack All The Things
    • AI & LLMS
    • About me
    • Adversary Simulation
    • Data Protection
    • DevOps
    • DevSecOps
    • Development Resources
    • IAM, AuthN & AuthZ
    • OSINT
    • Secure Architecture & Design
    • Segmentation Testing
    • Threat Modeling
    • Time-of-check-to-time-of-use
    • Vulnerability Scanning
      • Checklist
      • DNS Exfiltration
      • Delegation
      • Fundmentals
      • Local Privilege Escalation - Work in progress
      • PowerView Dev Cheatsheet
      • Remote Enumeration
      • Mimikatz
      • Apache Cordova
      • Flutter
      • Frida
      • Learning Resources
      • My Testing Enviroment
      • Smali
      • Xamarin
      • OASP
      • OSEP
      • OSWE
      • AWS Cli Cheatsheet
      • Bettercap
      • Frida & Objection cheatsheet
      • WebApplication Tooling
      • Configure WinDBG
      • adb Cheatsheet
      • Drozer cheatsheet
      • Jdb cheatsheet
      • R2frida cheatsheet
      • AWS Assessment
      • Azure AD Assessment
      • Azure
      • Azure Hardening Checklist
      • Azure best practices for network security
      • GCP Assessement
      • Kubernetes Assessment
      • Platform Agnostic Testing
      • Terraform Assessment
      • Hooking events using Inotify in C
      • C Linux Bind Shell
      • CMD Library
      • HSQLDB
      • MySQL
      • PSQL
      • SqlLite
      • C++ Win32 Applications
      • Checklist
      • Frida Windows
      • Hooking into an ELF binary
      • Tips and tricks
      • Win32 Internals
      • AMSI Bypass
      • Abusing Signed Executables
      • DNS Staging
      • Resources
      • Learning Resources
      • WinDbg
      • Msfvenom
      • ARP
      • Automation
      • DNS
      • DNS Rebind Attacks
      • Fundamentals
      • IPv6
      • MSRPC
      • Port Scan
      • Resources
      • SMB
      • SMTP
      • SSH
      • Sniffing
      • gRPC
      • Embedded Linux
      • Convert Debain to Kali
      • Kerberos
      • Local Machine Persistence
      • Miscellaneous
      • Privilege Escalation Checklist
      • Binaries
      • Convert Debain to Kali
      • Crypto Attacks
      • Empire 4.0
      • Git
      • Hashcat
      • Interesting Reads
      • My host setup
      • PWN
      • Physical Attacks
      • Pivot & Tunnel
      • Scripting
      • Sharing Wifi from a Windows Device
      • Interactive Shells
      • Simple Servers
      • Social Engineering
      • Tunneling
      • Wordlists
      • jq
      • mTLS
      • neo4j
      • CVSS 3.1
      • CVSS Shortcomings
      • DREAD
      • OWASP Risk Rating
      • OWASP Shortcomings
      • Obtaining Authorization
      • Scoping
        • Cloud Config Reviews
        • Web Application and API Penetration testing
      • 2FA SSH
      • Headscale Work in progress
      • Nginx Work in Progress
      • SEO Optimization
      • Bash Scripting
      • DotNet Debugging
      • Java
      • Database Logging
      • Methodology
      • Misc
      • Node
      • PHP
      • Python Debugging
      • Resources
      • Tooling
      • Java
      • Grammar
      • Public Pen test reports
      • Technical Writing for Educators - Work in progress
      • Technical Writing for Engineers
      • Writing Checklist
      • Writing Error Messages Checklist
      • Writing Helpful Error Messages
      • Tailscale
      • Burp Extensions
      • CMS
      • Resources
      • Salesforce Testing
      • Technology Fingerprinting
      • Testing Payment Integration Platforms
      • Tips and Tricks
      • WAF & Directory Brute Forcing
        • API Testing Checklist
        • API Tooling
        • Resources
        • AWS LocalStack
        • CORS
        • CSRF
        • CSV Injection
        • ClickJacking
        • Dangling markup injection
        • OGN/Expression Language Injection
        • HTTP Host header
        • LDAP Injection
        • Leak Server IP Address (WAF bypass)
        • Logic Attacks
        • Methodoloy
        • Misc
        • OAuth Workflow
        • Padding Oracle Attack
        • SSL Certificate
        • SSRF
        • SSTI
        • Serialization
        • Server Side Include/SSI
        • Web cache poisoning
        • WebSockets & WebWorkers
        • XSLT Engines
        • XSS
          • Head Smuggling
          • Nginx
        • CORS
        • CSP and XSS Protection
        • MIME Sniffing
        • SSL Strip attack
        • Same Site Cookies
        • X-Frame-Options
      • Basics
      • Burp Suite Setup
      • Connect to Shell Over USB
      • Extract IPA From AppStore Application
      • Frida Setup
      • Frida
      • LLDB
      • Learning Resource
      • Mobile Device Management (MDM)
      • My Setup
      • Objection
      • Reversing iOS Apps
      • Tweaks
      • Xamarin

    Head Smuggling

    Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond (intruder.io)

    Previous XSS
    Next Nginx
    Made with Material for MkDocs