Other nomination

Web Cache Deception Attack

Omer Gil · blackhat.com · 11 February 2018

Appending a non-existent static filename to an authenticated page URL, such as /account.do/logo.png, makes some servers return the page while the cache stores it under the .png key. The attacker then fetches that same URL unauthenticated and reads the victim's private page, including tokens that can lead to account takeover.

Record

Researcher

Omer Gil

Published by

blackhat.com

Date

11 February 2018

Format

Recording

In the archive

• Nominated for the 2018 Top 10 Web Hacking Techniques

Related sources

• Whitepaper

Tags

• cache-deception
• info-leak
• cache
• cdn
• reverse-proxy
• load-balancer
• aspnet
• django
• php

This page is the archive's own catalogue record. The research is the work of Omer Gil, first published at the original source. Preserved copies are kept so the citation survives its host.