Cannot Specify "Host" Header while scanning about web-cache-vulnerability-scanner

[m10x]

Hello @chencohen3 ,
unfortunately this is a limitation of golang's http libraries. It is not possible to alter the Host (nor the Content-Length) header. We developed a workaround for this for another tool (which will be released in a few weeks). However, we don't have a schedule yet, if and when this will be transferred to wcvs.
The following workaround may be applicable to you:

• How to use a proxy
• You can utilize a proxy to specify a rule to replace "Host: my-cache-cdn-url.com" with "Host: origin-server.com" for every request. (Note: this might break the Host header specific tests, however most tests should run fine)