> For the complete documentation index, see [llms.txt](https://skf.gitbook.io/asvs-write-ups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://skf.gitbook.io/asvs-write-ups/host-header-injection-authentication-bypass.md).

# Host Header Injection (Authentication Bypass)

- [Python - HttpOnly Session Hijacking XSS](https://skf.gitbook.io/asvs-write-ups/host-header-injection-authentication-bypass/python-httponly-session-hijacking-xss.md)