Collected research

Poisoning proxy caches using Java/Flash/Web Sockets

Lin-Shung Huang, Eric Y. Chen, Adam Barth, Eric Rescorla and Collin Jackson · adambarth.com

Java and Flash socket consent protocols are proxied by transparent intermediaries that never understand them, letting a SWF or applet forge a Host header over a raw socket. Ads served to 174,250 impressions measured roughly 7% of users exposed to IP hijacking and 0.2% to cache poisoning, at $0.93 per successful poisoning.

Record

Researcher

Lin-Shung Huang, Eric Y. Chen, Adam Barth, Eric Rescorla and Collin Jackson

Published by

adambarth.com

Format

Whitepaper

Topic

HTTP

In the archive

• Collected in the 2010 research round

Tags

• cache-poisoning
• proxy
• websocket
• flash
• java
• http
• measurement-study
• header-injection
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Lin-Shung Huang, Eric Y. Chen, Adam Barth, Eric Rescorla and Collin Jackson, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.