HTB CWES

HTB Certified Web Exploitation Specialist (CWES)

Full question bankEnglish
Exam overview

Practice session

Which HTTP header sent by the browser tells the server the full URL of the page that linked to the current request, and is commonly abused to test Referer-based SSRF or origin validation weaknesses?

Loading your practice session…