Host Header Injection

• Supply an arbitrary Host header

• Check for flawed validation

• Send ambiguous requests:

• If it's an internal contact, try to change the ID to see if the email is being sent as another user.

a. Inject duplicate Host headers

b. Supply an absolute URL

c. Add line wrapping

• Inject host override headers