Day 11
What type of webserver attack adds more data to the response header sent to client browser?
- DNS Poisoning
- Cross Site Scripting
- Path Traversal
- SOAP attack
- HTTP response splitting
Best answer by mkevenaar
View original
Question of the day 13/09, Cybersecurity Edition
Userlevel 7
+13
Userlevel 7
+14
HTTP response splitting
Userlevel 7
+12
I believe „Cross Site Scripting“.
The other names doesn‘t make sense to me :)
Userlevel 7
+17
HTTP response splitting
With this more data is added to a HTTP response header
Userlevel 7
+7
HTTP Response Splitting
Userlevel 7
+20
HTTP Response Splitting
Userlevel 7
+13
HTTP response splitting is the good one!
By inserting, in the right place in the header of the HTTP response, some carriage return (\r) and a linefeed (\n), client will process the packet in a different way as it conceived.
Here’s an example:
Comment
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.