CRLF Injection

The CRLF(Carriage Return and Line Feed) Injection Attack (sometimes also referred to as HTTP Response Splitting) is a simple, yet extremely powerful website attack. By placing custom html in the domain of the targeted website, the hacker may be able to inject the html(website content) directly into your webpage. Doing this, redirections can be made to malicious websites were user details are received in YOUR WEBSITES BRAND. This opens the door for more sophisticated types of attack such as XSS or Phishing.