Skip to content
attack.paths
Sign in
← LibraryTechnique entry
W-VHOST-CONFUSIONPrivilege Escalation

Host Header / Virtual Host Confusion

Routing decisions made on Host header — set Host: admin-internal to reach an internal admin app served by the same backend.

§ Where this technique fits

W-VHOST-CONFUSION is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.