Skip to main content
  • EN

Day 11

What type of webserver attack adds more data to the response header sent to client browser?

  • DNS Poisoning
  • Cross Site Scripting
  • Path Traversal
  • SOAP attack
  • HTTP response splitting

HTTP response splitting

I believe „Cross Site Scripting“.

The other names doesn‘t make sense to me :)

HTTP response splitting

With this more data is added to a HTTP response header

HTTP Response Splitting

HTTP Response Splitting

HTTP response splitting is the good one!

By inserting, in the right place in the header of the HTTP response, some carriage return (\r) and a linefeed (\n), client will process the packet in a different way as it conceived.

Here’s an example:
 

 

Comment


Terms & Conditions