id: external-service-interaction

info:
  name: External Service Interaction
  author: andreluna
  severity: info
  description: External Service interaction via Host Header Injection.
  reference:
    - https://portswigger.net/kb/issues/00300210_external-service-interaction-http
    - https://success.qualys.com/support/s/article/000006843
    - https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/17-Testing_for_Host_Header_Injection
  classification:
    cwe-id: CWE-918
  metadata:
    max-request: 1
  tags: miscellaneous,http,misc,oast,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/"
    headers:
      Host: "{{interactsh-url}}"

    redirects: false
    matchers:
      - type: word
        part: interactsh_protocol
        words:
          - "http"
          - "dns"
        condition: or
# digest: 4b0a00483046022100e0953f3d9a159faae147d657208d7011141a36e60a4344e2683d5f0dcc519841022100caae57fd279c8486fce5716c92c6345e08814ed9eea47ed61fd4952ac48ddd0c:922c64590222798bb761d5b6d8e72950