Schoolboy bags $10,000 reward from Google with easy HTTP Host bypass • The Register

https://www.theregister.co.uk/2017/08/10/schoolboy_google_bug_bounty_http_host/