hunt-host-header
Fail
Audited by Snyk on Jun 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This document is an explicit, step‑by‑step offensive guide for exploiting Host header weaknesses to exfiltrate password reset tokens, perform routing SSRF against cloud metadata (credential theft), and conduct web-cache poisoning and OAuth/OIDC poisoning — all high‑risk techniques that enable account takeover and mass exploitation.
Issues (1)
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata