Hackers can change your passwords with this exploit..

Checkout AppMySite and convert your website to native mobile app in minutes!: https://www.appmysite.com/?ref=internal&tap_s=4294845-a20d74

In this video, I demonstrate Host Header Injection and how hackers exploit this vulnerability to reset passwords of users on a website.

DISCLAIMER: This video is intended only for educational purposes. The concepts showcased in this video are completely from a penetration testing perspective. I do not promote or encourage any illegal hacking activities.

Host header injection vulnerability exists when a website takes the Host value from the request header and processes it in an operation like construction the password reset URL for a user. When this happens, the request is directed to the attacker's server instead of the actual web server of the website.

In this video, I showcased this vulnerability on a retired HackTheBox machine called Forgot.
Check out this machine here: https://www.hackthebox.com/machines/forgot

Thanks for watching!
SUBSCRIBE for more videos!

Join my Discord: https://discord.gg/6TjBzgt
Follow me on Instagram: https://instagram.com/teja.techraj
Website: https://techraj156.com​​​​​
Blog: https://blog.techraj156.com

Видео Hackers can change your passwords with this exploit.. канала Tech Raj