The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Using X-Forwarded-host in Web cache poisoning

Keith | Last updated: Dec 01, 2022 09:18PM UTC

I'm currently working on the web cache poisoning with an unkeyed header lab but whenever I put x=forwarded-host in my header I don't receive a response back. I even tested this by sending the header with just ?cb=1234 and the request went thru with a 200 ok response but as soon as I add the X-Forwarded-host into it, I receive nothing, nada. why is this happening

Ben, PortSwigger Agent | Last updated: Dec 02, 2022 08:50AM UTC