image Get the whitepaper, toolkits & remediation guides → http1mustdie.com
Research Academy
My account Customers About Blog Careers Legal Contact Resellers
Back to all learning paths
PRACTITIONER

Web cache deception

This learning path covers web cache deception vulnerabilities. You'll learn how to identify discrepancies between how the origin server and cache handle requests and how to leverage the discrepancies to create path confusion.

Contents

Get started: Web caches

0 of 36

GET STARTED

Web caches 0 of 3

Web caches APPRENTICE Get started

Cache keys APPRENTICE

Cache rules APPRENTICE

Constructing a web cache deception attack 0 of 3

Constructing a web cache deception attack APPRENTICE

Using a cache buster APPRENTICE

Detecting cached responses APPRENTICE

Exploiting static extension cache rules 0 of 1

Exploiting static extension cache rules APPRENTICE

Using path mapping discrepancies 0 of 4

Path mapping discrepancies APPRENTICE

Path mapping discrepancies - Continued APPRENTICE

Exploiting path mapping discrepancies APPRENTICE

Lab: Exploiting path mapping for web cache deception APPRENTICE

Using delimiter discrepancies 0 of 7

Delimiter discrepancies APPRENTICE

Delimiter discrepancies - Continued APPRENTICE

Delimiter discrepancies - Continued APPRENTICE

Exploiting delimiter discrepancies APPRENTICE

Exploiting delimiter discrepancies - Continued APPRENTICE

Exploiting delimiter discrepancies - Continued APPRENTICE

Lab: Exploiting path delimiters for web cache deception PRACTITIONER

Using delimiter decoding discrepancies 0 of 3

Delimiter decoding discrepancies APPRENTICE

Delimiter decoding discrepancies - Continued APPRENTICE

Exploiting delimiter decoding discrepancies APPRENTICE

Exploiting static directory cache rules 0 of 1

Exploiting static directory cache rules APPRENTICE

Using normalization discrepancies 0 of 10

Normalization discrepancies APPRENTICE

Detecting normalization by the origin server APPRENTICE

Detecting normalization by the cache server APPRENTICE

Detecting normalization by the cache server - Continued APPRENTICE

Detecting normalization by the cache server - Continued APPRENTICE

Exploiting normalization by the origin server APPRENTICE

Lab: Exploiting origin server normalization for web cache deception PRACTITIONER

Exploiting normalization by the cache server APPRENTICE

Exploiting normalization by the cache server - Continued APPRENTICE

Lab: Exploiting cache server normalization for web cache deception PRACTITIONER

Exploiting file name cache rules 0 of 3

Exploiting file name cache rules APPRENTICE

Detecting normalization discrepancies APPRENTICE

Exploiting normalization discrepancies APPRENTICE

Preventing vulnerabilities 0 of 1

Preventing web cache deception vulnerabilities APPRENTICE