ID Leak PoC — Header Leak / Topnav chain

mapped origin: https://g4xpz.sinn.io (plugin must treat this as the customDomain)

Run flow 1: Header Leak Run flow 2: Topnav chain

Arm topnav chain (manual) Load /app/UserHome (DNR path) Load with fake code Unmask (decoy re-plant) Reset

masked = the plugin rewrote the tenant to the mapping host (not a disclosure). Unmask flips the well-known to a decoy org, clears the mapping, and re-plants — the displaced real tenant then shows verbatim. well-known: ?

loading…