What is HTTP Parameter Pollution
Tags
| attack-pattern: | Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | fa8e9226-7d25-4674-b874-a739ea3137e9 |
| Fingerprint | ad8a919977577655 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | July 2, 2023, 8:49 a.m. |
| Added to db | July 2, 2023, 11 a.m. |
| Last updated | Nov. 17, 2024, 11:40 p.m. |
| Headline | What is HTTP Parameter Pollution |
| Title | What is HTTP Parameter Pollution |
| Detected Hints/Tags/Attributes | 20/1/38 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 167 | ✔ | Cybersecurity on Medium | https://medium.com/feed/tag/cybersecurity | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 6 | www.mybank.com |
|
| Details | Domain | 206 | www.example.com |
|
| Details | Domain | 78 | attacker.com |
|
| Details | Domain | 831 | example.com |
|
| Details | Domain | 3 | blog.mindedsecurity.com |
|
| Details | Domain | 222 | www.blackhat.com |
|
| Details | Domain | 1 | www.madlab.it |
|
| Details | Domain | 1 | macrosec.tech |
|
| Details | Domain | 1373 | twitter.com |
|
| Details | Domain | 23 | infosecwriteups.com |
|
| Details | Domain | 19 | www.acunetix.com |
|
| Details | File | 1 | geolocate.js |
|
| Details | File | 1 | hpp-1.php |
|
| Details | File | 1 | hpp-2.php |
|
| Details | File | 1 | client-side-http-parameter-pollution.html |
|
| Details | File | 1 | bhwebcast28-balduzzi.pdf |
|
| Details | File | 1 | whitepaper-bheu2011.pdf |
|
| Details | File | 1206 | index.php |
|
| Details | Url | 1 | https://www.mybank.com/profile/transfer?from=mohammed&to=khaled&amount=1000 |
|
| Details | Url | 1 | https://www.mybank.com/profile/transfer?from=mohammed&to=khaled&amount=1000&from=abdullah |
|
| Details | Url | 1 | http://localhost/bwapp/hpp-1.php |
|
| Details | Url | 1 | http://localhost/bwapp/hpp-2.php?name=khaled&action=vote |
|
| Details | Url | 1 | http://localhost/bwapp/hpp-2.php?movie=9&name=khaled&action=vote |
|
| Details | Url | 1 | http://localhost/bwapp/hpp-2.php?movie=2&name=khaled&action=vote |
|
| Details | Url | 1 | http://localhost/bwapp/hpp-2.php?name=&movie=2&action=vote |
|
| Details | Url | 1 | http://localhost/bwapp/hpp-2.php?movie=9&name=&movie=2&action=vote |
|
| Details | Url | 1 | https://www.example.com/welcome?url= |
|
| Details | Url | 1 | https://www.some_site.com/post |
|
| Details | Url | 1 | https://www.example.com/welcome?url=https://www.some_site.com/post&url=https://attacker.com |
|
| Details | Url | 1 | https://example.com/page?id=22 |
|
| Details | Url | 1 | https://example.com/page?id=22&id=90 |
|
| Details | Url | 1 | https://blog.mindedsecurity.com/2009/05/client-side-http-parameter-pollution.html |
|
| Details | Url | 1 | https://www.blackhat.com/docs/webcast/bhwebcast28-balduzzi.pdf |
|
| Details | Url | 1 | https://www.madlab.it/slides/bheu2011/whitepaper-bheu2011.pdf |
|
| Details | Url | 1 | https://macrosec.tech/index.php/2021/05/24/http-parameter-pollution-hpp |
|
| Details | Url | 1 | https://twitter.com/paulosyibelo/status/1430972472942284806 |
|
| Details | Url | 1 | https://infosecwriteups.com/behind-the-scene-http-parameter-pollution-534b4fa2449c |
|
| Details | Url | 1 | https://www.acunetix.com/blog/whitepaper-http-parameter-pollution |