Web Hack List

Collected research

Web Cache Entanglement: Novel Pathways to Poisoning

Cache keys are parsed, normalised and transformed before they are stored, and those transformations let two semantically different requests collide on one key. Cache oracles, unkeyed query strings, parameter cloaking, fat GET requests and key injection turn that into persistent page poisoning, broken redirects and single-request denial of service.

Record

Researcher
James Kettle
Published by
PortSwigger Research
Date
Topic
Other

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .