Atharv Tripathi·1d agoWhat is Web Cache Deception?Web Cache Deception is a vulnerability where an attack can trick the caching server into thinking that a sensitive dynamic page is a static…
Bhanvararam choudhary·Sep 26Mastering Web Cache Deception: PortSwigger 5 LabsA Practical Guide to Exploiting Path Mapping, Delimiters, Normalization, and Exact-Match Cache Rules
Abhinabshrestha·Sep 11One .svg and a CDN: How a File Extension Leaked Strangers' PIIA walkthrough of a Web Cache Deception bug that turned a private profile API into a public one — and the story of how it got closed as a…
CYBER MIND SPACE·Aug 10Web Cache Deception vs Web Cache Poisoning: The Attack Paths Most Hunters ConfuseTwo bugs. Same word — “cache” — in both names. Completely different kill chains. And I’ve seen enough duplicate reports and “N/A, not a…
HCN·Jul 20Using Cache Deception Techniques to Discover Cache Poisoning VectorsTo find cache poisoning vulnerabilities, the first step is to identify a cache-busting technique. Without a cache-busting method, it is not…
InOSINT TeambyRahul Singh Chauhan·May 27Cache Deception leads To a Critical Issue in a Banking ApplicationHi everyone, in this video, we’ll talk about Cache Deception and how I was able to leverage it to get a high impact issue on a banking…
ALESSANDRO FARREL GERRARD WIJAYA·Mar 13Day 14–15 of PortSwigger Academy Lab Walkthrough: Race conditions, NoSQL injection, API testing…Focuses on performing step by step tutorials on solving all apprentice levels of Race conditions, NoSQL injection, API testing, Web LLM…
Mahmoud Khalid·Feb 4Two Caching Bugs in Two Different Bug Bounty ProgramsIn the name of God, the most gracious, the most merciful. May Allah’s blessings and peace be upon our Prophet MuhammadA response icon1A response icon1
Nullifiedsec·Jan 7Why Your Cache Rules are Leaking User Data (Web Cache Deception)(The original article is in my website click here to view it)