{"blog_url":"https://cysec148.hatenablog.com/","image_url":null,"version":"1.0","categories":["Web Security Academy","Host Header"],"height":"190","provider_name":"Hatena Blog","url":"https://cysec148.hatenablog.com/entry/2025/07/05/130146","title":"\u306a\u305cHTTP Host\u30d8\u30c3\u30c0\u30fc\u8106\u5f31\u6027\u306f\u751f\u307e\u308c\u308b\u306e\u304b\uff1f","author_url":"https://blog.hatena.ne.jp/ThisIsOne/","description":"Hello there, ('\u03c9')\u30ce \ud83d\udd0d \u8106\u5f31\u6027\u306e\u6839\u672c\u539f\u56e0 Host\u30d8\u30c3\u30c0\u30fc\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306f\u3001\u300cHost\u30d8\u30c3\u30c0\u30fc\u306f\u4fe1\u983c\u3067\u304d\u308b\u300d\u3068\u3044\u3046\u8aa4\u89e3\u304b\u3089\u767a\u751f\u3057\u307e\u3059\u3002 \u5b9f\u969b\u306b\u306f\u3001Host\u30d8\u30c3\u30c0\u30fc\u306f\u30e6\u30fc\u30b6\u30fc\u304c\u81ea\u7531\u306b\u66f8\u304d\u63db\u3048\u53ef\u80fd\u3067\u3042\u308a\u3001Burp Suite\u306a\u3069\u306e\u30c4\u30fc\u30eb\u3092\u4f7f\u3048\u3070\u7c21\u5358\u306b\u6539\u3056\u3093\u3067\u304d\u307e\u3059\u3002 \ud83d\udd10 \u60f3\u5b9a\u5916\u306e\u4fe1\u983c\u306b\u3088\u308b\u554f\u984c \u591a\u304f\u306e\u958b\u767a\u8005\u306f\u6b21\u306e\u3088\u3046\u306b\u8003\u3048\u304c\u3061\u3067\u3059\uff1a \u300c\u30b5\u30fc\u30d0\u306b\u9001\u3089\u308c\u3066\u304f\u308bHost\u30d8\u30c3\u30c0\u30fc\u306f\u3001\u5e38\u306b\u6b63\u3057\u3044\u30c9\u30e1\u30a4\u30f3\u540d\u3060\u308d\u3046\u300d \u3053\u306e\u3088\u3046\u306a\u524d\u63d0\u306e\u3082\u3068\u3001\u6b21\u306e\u3088\u3046\u306a\u51e6\u7406\u304c\u66f8\u304b\u308c\u307e\u3059\uff1a $url = \"https://\" . $_SERVER['HTTP_HOST'] . \"/reset?token=abc\"\u2026","type":"rich","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fcysec148.hatenablog.com%2Fentry%2F2025%2F07%2F05%2F130146\" title=\"\u306a\u305cHTTP Host\u30d8\u30c3\u30c0\u30fc\u8106\u5f31\u6027\u306f\u751f\u307e\u308c\u308b\u306e\u304b\uff1f - Shikata Ga Nai\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"Shikata Ga Nai","author_name":"ThisIsOne","provider_url":"https://hatena.blog","width":"100%","published":"2025-07-05 13:01:46"}