SCI TCH CY CYBER MIND SPACE Web Cache Deception vs Web Cache Poisoning: The Attack Paths Most Hunters Confuse Two bugs. Same word — “cache” — in both names. Completely different kill chains. And I’ve seen enough duplicate reports and “N/A, not a…
AI HC HCN Using Cache Deception Techniques to Discover Cache Poisoning Vectors To find cache poisoning vulnerabilities, the first step is to identify a cache-busting technique. Without a cache-busting method, it is not…
TI tinopreter Cracking SameSite for a $2,000 Web Cache Deception Akwaaba! everyone. This one was quite fun, and I will breakdown my methodology. My last writeup was a $500 OAuth Account Fusion bug which…
TCH AA Aashif · InfoSec Write-ups Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications A small mis-configuration pays !!!
1P 1P!ng 網頁快取利用之技術分析 隨著 CDN 技術的普及,使網站的載入速度加快,並提供安全性的防護,但因其解析方式上的差異,也增加了攻擊者的攻擊面。本技術分析報告將針對 Martin Doyhenard 在 Black Hat 2024 的演講《Gotta Cache ’em all: bending the…