Description

Detects potential Host header injection vulnerabilities that could enable malicious redirections. This security issue occurs when an application processes the HTTP Host header in an unsafe way, potentially allowing attackers to manipulate redirects to malicious domains.

Detection Strategy

• Examines HTTP requests containing the domain 'fluidattacks.com' in host-related fields

• Triggers when the application processes host headers in a way that could enable redirect manipulation

• Reports a vulnerability when specific domain patterns are detected in host-related request contexts