Blog Post

IIS Support Blog
2 MIN READ

Host Header Vulnerability

Nedim's avatar
Nedim
Former Employee
Nov 25, 2019
Browsers send Host Header to inform about the URL client wants to visit. Attackers can temper Host Header to manipulate how the application works. Here is how this attack occurs:   Attacker mak...
Updated May 13, 2020
Version 2.0
Eswaran2045's avatar
Eswaran2045
Copper Contributor
Jun 08, 2021

Hi, 

I configured the rewrite rule directly in web.config file. It works for me when I test it in local machine. However, it doesn't work for me when I configure it in iis manager in the production server. Could there be any reason for this?

Thanks in advance