ctf中web方向常见http数据头题目考点

http请求数据包常用的头部关键字

1、判断客户端地址

• X-Forwarded-For: 127.0.0.1
• X-Forwarded: 127.0.0.1
• Forwarded-For: 127.0.0.1
• Forwarded: 127.0.0.1
• X-Forwarded-Host: 127.0.0.1
• X-remote-IP: 127.0.0.1
• X-remote-addr: 127.0.0.1
• True-Client-IP: 127.0.0.1
• X-Client-IP: 127.0.0.1
• Client-IP: 127.0.0.1
• X-Real-IP: 127.0.0.1
• Ali-CDN-Real-IP: 127.0.0.1
• Cdn-Src-Ip: 127.0.0.1
• Cdn-Real-Ip: 127.0.0.1
• CF-Connecting-IP: 127.0.0.1
• X-Cluster-Client-IP: 127.0.0.1
• WL-Proxy-Client-IP: 127.0.0.1
• Proxy-Client-IP: 127.0.0.1
• Fastly-Client-IP: 127.0.0.1
• True-Client-Ip: 127.0.0.1

2、判断访问来源

• Referer:google.com
• Origin: https://google.com

3、判断浏览器信息

• User-Agent:Chrom

http响应数据包常用的头部关键字

1、X-Powered-By:PHP/5.6.40 //显示当前网站的语言