From 73f6226f22817a3713e483127f7c55f1af73d757 Mon Sep 17 00:00:00 2001 From: firefart <105281+firefart@users.noreply.github.com> Date: Sun, 19 Nov 2023 07:21:32 +0100 Subject: [PATCH] better host header check --- gobusterfuzz/gobusterfuzz.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gobusterfuzz/gobusterfuzz.go b/gobusterfuzz/gobusterfuzz.go index 162bd39b..f51e9aed 100644 --- a/gobusterfuzz/gobusterfuzz.go +++ b/gobusterfuzz/gobusterfuzz.go @@ -100,7 +100,7 @@ func (d *GobusterFuzz) ProcessWord(ctx context.Context, word string, progress *l requestOptions.ModifiedHeaders = make([]libgobuster.HTTPHeader, len(d.options.Headers)) for i := range d.options.Headers { // Host header can't be set via Headers, needs to be a separate field - if d.options.Headers[i].Name == "Host" { + if http.CanonicalHeaderKey(d.options.Headers[i].Name) == "Host" { requestOptions.Host = strings.ReplaceAll(d.options.Headers[i].Value, FuzzKeyword, word) continue }