1. Web Security Academy
  2. Web cache poisoning
  3. Exploiting cache implementation flaws
  4. Lab

Lab: Internal cache poisoning


This lab is vulnerable to web cache poisoning. It uses multiple layers of caching. A user regularly visits this site's home page using Chrome.

To solve the lab, poison the internal cache so that the home page executes alert(document.cookie) in the victim's browser.