fix: ensure Host header is set in unsafe mode for rawhttp requests

Author: ayanrajpoot10

common/httpx/httpx.go

@@ -424,6 +424,11 @@ func (h *HTTPX) SetCustomHeaders(r *retryablehttp.Request, headers map[string]st
 		switch strings.ToLower(name) {
 		case "host":
 			r.Host = value
+			// In unsafe mode (rawhttp), the Host header must be explicitly set in req.Header
+			// because rawhttp uses req.Header directly and doesn't check req.Host
+			if h.Options.Unsafe {
+				r.Header.Set("Host", value)
+			}
 		case "cookie":
 			// cookies are set in the default branch, and reset during the follow redirect flow
 			fallthrough

runner/runner.go

@@ -1640,7 +1640,6 @@ retry:
 	if target.CustomHost != "" {
 		req.Host = target.CustomHost
 	}
-
 	if !scanopts.LeaveDefaultPorts {
 		switch {
 		case protocol == httpx.HTTP && strings.HasSuffix(req.Host, ":80"):