Collected research

Web Cache Deception Attack

Omer Gil · blackhat.com · 11 February 2018

Appending a non-existent static filename to an authenticated page URL, such as /account.do/logo.png, makes some servers return the page while the cache stores it under the .png key. The attacker then fetches that same URL unauthenticated and reads the victim's private page, including tokens that can lead to account takeover.

Record

Researcher

Omer Gil

Published by

blackhat.com

Date

11 February 2018

Format

Recording

Topic

HTTP

In the archive

• Collected in the 2018 research round

Related sources

• us 17 Gil Web Cache Deception Attack wp Whitepaper

Tags

• cache-deception
• info-leak
• cache
• cdn
• reverse-proxy
• load-balancer
• aspnet
• django
• php

This page is the archive's own catalogue record. The research is the work of Omer Gil, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.