https://github.com/mindpatch/zaphoster
Fix host header error in zaproxy
https://github.com/mindpatch/zaphoster
zaproxy
Last synced: 3 months ago
JSON representation
Fix host header error in zaproxy
- Host: GitHub
- URL: https://github.com/mindpatch/zaphoster
- Owner: MindPatch
- Created: 2021-01-14T17:23:11.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2021-02-15T17:43:39.000Z (over 4 years ago)
- Last Synced: 2025-01-22T17:31:09.187Z (5 months ago)
- Topics: zaproxy
- Language: Python
- Homepage:
- Size: 340 KB
- Stars: 1
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# zaphoster
### [Fix host header forcing in zaproxy](https://github.com/zaproxy/zaproxy/issues/1318)
add ZAP/zap-hoster.py script to httpsender tab and run app.py
```
$ sudo pip3 install flask requests
$ python3 app.py
```
```
GET https://knassar702.github.io/ HTTP/1.1
Host: knassar702.github.io
User-agent: Firefox test
For Change host header
---
GET https://knassar702.github.io/
Host: knassar702.github.io
User-agent: Firefox test
ZAP-HOST: localhost
ZAP-HOST will be removed and the host header will be change to his value
GET https://knassar702.github.io/ HTTP/1.1
Host: localhost
User-agent: Firefox test
----
follow redirects with ZAP-REDIRECT header
GET https://knassar702.github.io/
Host: knassar702.github.io
User-agent: Firefox test
ZAP-HOST: localhost
ZAP-REDIRECT: anything
```
### [youtube](https://www.youtube.com/watch?v=1fgNkFwmcbE)
