HTTP Code Injection is a type of web-based attack that involves injecting or modifying HTTP response codes, usually with the aim of causing the server or client to behave in an unintended manner. This can be accomplished by exploiting vulnerabilities in web applications or servers to modify the HTTP response codes that are returned to the client. For example, an attacker could modify a 200 (OK) response code to a 404 (Not Found) code, causing the client to display an error message or redirect to a different page. HTTP Code Injection can also be used to bypass security controls or gain unauthorized access to sensitive information.
