Pentester Lab 06 Writeup

The goal here is access to the default virtual host ("vhost"). What is a vhost? A virtual host (vhost) is a method for hosting multiple domain names or websites (e.g., site1.com and site2.com) on a single physical server. It allows web servers like Apache or NGINX to direct incoming traffic to the correct folder, enabling cost-effective shared hosting where resources are shared

The focus is on accessing the default virtual host and understanding how to manipulate HTTP headers using tools like Curl. First, we need to get the IP of the website using available tools such as dig, host, etc., which give us the IP

Then we curl to make the client connect to the IP address, and we use -v for verbose to see the key and the HTTP request, and we see the host header and the HTTP request align. The flag is revealed; you can also enter the IP address in your browser to get the flag.Thank you