https://anashamidi.com/tags/web-cache-poisoning/ Recent content in Web-Cache-Poisoning on Hugo en Fri, 05 Apr 2024 00:00:00 +0000 https://anashamidi.com/posts/web-cache-poisoning-and-deception/ Fri, 05 Apr 2024 00:00:00 +0000 https://anashamidi.com/posts/web-cache-poisoning-and-deception/ <p>Good day! I hope you&rsquo;re doing well.</p> <p>I&rsquo;ve been studying web cache vulnerabilities, so here&rsquo;s a shortcut through all the different techniques I&rsquo;ve come across so far. I&rsquo;ll assume you already have a basic understanding of web caching concepts.</p> <p>الحمدلله والصلاة والسلام على رسول الله</p> <p>Obviously, the cache itself isn&rsquo;t a vulnerability. What makes web applications vulnerable to web cache attacks is either chaining them with other bugs (most often XSS) or abusing misconfigurations to launch a Denial-of-Service (DoS) attack on the site.</p>