domains / security / host-header-injection-hunt / hunt-host-header

hunt-host-header

Skill card

authentic

The two copies are the same skill. The uphiago/recon-skills copy is the more complete, self-contained procedure: it includes the full step-by-step methodology with concrete curl/openssl commands, timeout flags, and the full set of header-override variants. The sickn33/agentic-awesome-skills copy is a mirrored/derived version that adds a mandatory authorization gate and provenance metadata but truncates the command list and omits several later phases. The authorization gate is a policy wrapper, not a new technical step, so crowning the recon-skills copy does not hide a real alternative procedure.

Repositories

Other copies