BSCP
Burp Suite Certified Practitioner (BSCP)
Http Host Header AttacksEnglish
Exam overviewPractice session
A web application uses HTTP Host header to construct password reset links: `https://$_SERVER['HTTP_HOST']/reset?token=ABC`. An attacker modifies the Host header to `attacker.com` in the reset request. What is the impact?
Loading your practice session…