Removing unnecessary headers from requests can be useful when creating PoCs to have a cleaner and smaller screenshot/poc.
This can be done to two ways:
A1- Passive: removing common unimportant headers (referer header might be useful to see how the link has been created or sometimes it is used as a CSRF protection)
B1- Active: removing target-specific unimportant headers first (if it exists) to see whether the response changes, if the response does not change then continue to step B3 otherwise discard the removal and then jump to step B2
B2- Active: removing common unimportant headers to see whether the response changes, if the response does not change then continue to step B3 otherwise discard the removal and then jump to step B3
B3- Active: remove headers one by one to see which one changes the response - remove the ones that do not change the result
B4- Add identified unimportant headers to the list of target-specific common unimportant headers so B1 can use it (target-specific is by HOST -> different paths can obviously have different requirements but we do not want to make it complicated)
C1- Passive: removing target-specific unimportant headers (only active when B4 was used previously)
Removing unnecessary headers from requests can be useful when creating PoCs to have a cleaner and smaller screenshot/poc.
This can be done to two ways:
A1- Passive: removing common unimportant headers (referer header might be useful to see how the link has been created or sometimes it is used as a CSRF protection)
B1- Active: removing target-specific unimportant headers first (if it exists) to see whether the response changes, if the response does not change then continue to step B3 otherwise discard the removal and then jump to step B2
B2- Active: removing common unimportant headers to see whether the response changes, if the response does not change then continue to step B3 otherwise discard the removal and then jump to step B3
B3- Active: remove headers one by one to see which one changes the response - remove the ones that do not change the result
B4- Add identified unimportant headers to the list of target-specific common unimportant headers so B1 can use it (target-specific is by HOST -> different paths can obviously have different requirements but we do not want to make it complicated)
C1- Passive: removing target-specific unimportant headers (only active when B4 was used previously)