New Hacking tricks||Learn Hacking Online,Best Hacking Site ,How to Hack Facebook Account: XSS vulnerability

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 style="text-align: left;">
HTTP Header</h3>
HTTP Header is the component of HTTP requests and responces. Header fields are transimitted with each request and responce and carry additional data about the requests and responces. See the typical request and responce headers Here at Web-Sniffer.net <h3 style="background-color: white; font-family: Verdana, sans-serif; margin: 10px 0px; padding: 0px;">
HTTP header injection</h3>
HTTP header injection is a kind of web application vulnerability which exists on those web applications that generatd HTTP headers based on the input given by users. If it uses User based input in the headers, it can be used for HTTP response splitting, cross-site scripting (<span class="kLink" style="background-color: transparent; background-image: none; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px 0px 1px !important; position: static; width: auto !important;">XSS), Session fixation via the Set-Cookie header, and malicious redirects attacks via the location header. <div class="separator" style="background-color: white; clear: both; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4nsCkW54WxskF-4ene1Quw3iQeWudfPbWyTBGRBWPpec3JqLIwImwWmdPw18C0fevtA4Tzpn7lii8SoRM9nvxwbmsv14vrg41Cg41rmSJe35BI-a80U4YM1RvZSDBgD_As7D0egqS5jaY/s1600/network-security-auditing.jpg" imageanchor="1" style="color: #0000dd; margin: 0px 1em; padding: 0px; text-decoration: initial;"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4nsCkW54WxskF-4ene1Quw3iQeWudfPbWyTBGRBWPpec3JqLIwImwWmdPw18C0fevtA4Tzpn7lii8SoRM9nvxwbmsv14vrg41Cg41rmSJe35BI-a80U4YM1RvZSDBgD_As7D0egqS5jaY/s320/network-security-auditing.jpg" style="border: 0px; margin: 0px; padding: 0px;" width="320" /></a></div>
 I recently found a similar kind of vulnerability in http://canadaedu.apple.com and for this I was also acknowledged by Apple on its website. It used apache 1.3.33 that was vulnerable to the HTML and malicious javascript injection through  "Expect" header. See the responce header of the website: <blockquote class="tr_bq" style="background-color: #f6ebc1; border-left-color: rgb(252, 226, 124); border-left-style: solid; border-left-width: 10px; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 1em 2em; padding: 0.5em 1em;">
GET / HTTP/1.0 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) Host: canadaedu.apple.com Cookie: PHPSESSID=3b8026225d719c6945155129c5c7335d Connection: Close Expect: <script>alert(411731119275)</script> Pragma: no-cache</blockquote>
The alert box added in the Expect field could be injected for Cross <span class="kLink" style="background-color: transparent; background-image: none; border-bottom-color: blue; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px 0px 1px !important; position: static; width: auto !important;">Site <span class="kLink" style="background-color: transparent; background-image: none; border-bottom-color: blue; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px 0px 1px !important; position: static; width: auto !important;">Scripting.</div>

What is HTTP Header Injection Vulnerability

HTTP Header HTTP Header is the component of HTTP requests and responces. Header fields are transimitted with each request and responce an...

+ Read more »