DZone
Thanks for visiting DZone today,
Edit Profile
  • Manage Email Subscriptions
  • How to Post to DZone
  • Article Submission Guidelines
Sign Out View Profile
  • Post an Article
  • Manage My Drafts
Over 2 million developers have joined DZone.
Log In / Join
  • Refcardz
  • Trend Reports
  • Webinars
  • Zones
  • |
    • Agile
    • AI
    • Big Data
    • Cloud
    • Database
    • DevOps
    • Integration
    • IoT
    • Java
    • Microservices
    • Open Source
    • Performance
    • Security
    • Web Dev
DZone >

Spoofing the Host Entry in a HTTPWebRequest

Paul Stack user avatar by
Paul Stack
·
May. 06, 12 · · Interview
Like (0)
Save
Tweet
7.87K Views

Join the DZone community and get the full member experience.

Join For Free

I had this idea to create a dashboard that would ping different version of a site in order to get the build number. The details are as follows:

www.mysite.com

runs on a local site at 192.x.x.x, a QA environment at 10.x.x.x, a staging environment at 66.x.x.x, and a live environment at 88.x.x.x (these IPs are made up). In order to hit each site, I would usually manually change the host file and then make the web request. This was not a great solution as I hate dealing with host file entries. On experimenting with HTTPWebRequest, I noticed that you can use reflection in order to change the Headers of the Request. The normal code to create a HTTPWebRequest would look as follows:

try
{
    var request = (HttpWebRequest)HttpWebRequest.Create(new Uri("string url"));

    var webresponse = (HttpWebResponse)request.GetResponse();
    var streamReader = new StreamReader(webresponse.GetResponseStream());

    string response = streamReader.ReadToEnd();
}

I was able to spoof the host by changing the host using reflection:

try
{
var request = (HttpWebRequest)HttpWebRequest.Create(new Uri("string IP address"));
request.Headers.GetType().InvokeMember("ChangeInternal",
BindingFlags.NonPublic | BindingFlags.Instance | BindingFlags.InvokeMethod, null,
request.Headers, new object[] { "Host", "Fake host entry" });

var webresponse = (HttpWebResponse)request.GetResponse();

var streamReader = new StreamReader(webresponse.GetResponseStream());

string response = streamReader.ReadToEnd();
}

This allowed me to make multiple requests to different versions of the same site. Using a simple collection of my site objects to build a dashboard that had the following outline:

  Local QA Stage Live
Build Number web_12_4_qa web_12_4_qa web_12_5_stg web_12_4_pro

 

Host (Unix)

Opinions expressed by DZone contributors are their own.

Popular on DZone

  • Top Six Kubernetes Best Practices for Fleet Management
  • Why to Implement GitOps into Your Kubernetes CI/CD Pipelines
  • Suspicious Sortings in Unity, ASP.NET Core, and More
  • Datafaker: An Alternative to Using Production Data

Comments

Partner Resources

X

ABOUT US

  • About DZone
  • Send feedback
  • Careers
  • Sitemap

ADVERTISE

  • Advertise with DZone

CONTRIBUTE ON DZONE

  • Article Submission Guidelines
  • MVB Program
  • Become a Contributor
  • Visit the Writers' Zone

LEGAL

  • Terms of Service
  • Privacy Policy

CONTACT US

  • 600 Park Offices Drive
  • Suite 300
  • Durham, NC 27709
  • support@dzone.com
  • +1 (919) 678-0300

Let's be friends:

DZone.com is powered by 

AnswerHub logo