Collected research
Gotta cache 'em all: bending the rules of web cache exploitation
Web caches key stored responses on the URL, but the CDN or proxy computing that key and the origin server routing the request often parse the URL differently. This paper maps delimiter and normalisation discrepancies between proprietary URL parsers and shows they turn web cache deception and poisoning from narrow, site-specific bugs into arbitrary attacks reproducible across many sites and CDN providers, alongside defensive guidance.
Record
- Researcher
- Martin Doyhenard
- Published by
- PortSwigger Research
- Date
- Topic
- Other
In the archive
Related sources
- Gotta Cache Em All: Bending the rules of web cache exploitation - Martin Doyhenard - Ekoparty 2024
- DEF CON 32 - Gotta Cache ‘em all bending the rules of web cache exploitation - Martin Doyhenard
- Gotta Cache Em All: Bending the Rules of Web Cache Exploitation
Tags
This page is the archive's own catalogue record. The research is the work of Martin Doyhenard, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .