Other nomination

Reverse proxies & Inconsistency

Aleksei "GreenDog" Tiurin · Speaker Deck · 23 January 2019

Reverse proxies, caches, and origin servers decode and normalize paths differently, especially around path parameters, encoded dot segments, and duplicate slashes. The slides use these parser differentials to bypass access rules, misroute requests, manipulate security headers, and create web cache deception or poisoning.

Record

Researcher

Aleksei "GreenDog" Tiurin

Published by

Speaker Deck

Date

23 January 2019

Format

Recording

In the archive

• Nominated for the 2019 Top 10 Web Hacking Techniques

Related sources

• Slides

Tags

• parser-differential
• cache-deception
• cache-poisoning
• url-parsing
• reverse-proxy
• proxy
• auth-bypass
• cache
• filter-bypass
• http
• owasp-a01-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Aleksei "GreenDog" Tiurin, first published at the original source. Preserved copies are kept so the citation survives its host.