How i found Host Header Injection on SpaceX

3 months ago 36

BOOK THIS SPACE FOR AD

ARTICLE AD

During the reconnaissance and information gathering, I found an IP address on Shodan that belongs to SpaceX ( Let’s Say It’s {x.x.x.x} ) . This IP redirects the visitors to a subdomain for SpaceX ( sub.spacex.com ). The flaw was here when you visit this IP and You change the Host Header to any site. It will redirects you to that site.

Go to https://[ Spacex IP ]/bds/Login.doIntercept the requestChange the host header to your siteForward the request and you’ll see that you’re redirected to the website

When I changed the Host Header to google.com.

It redirected me to Google!!

Unfortunately, The bug was duplicated :/

Hope you enjoyed ❤

Read Entire Article