Monday, November 2, 2026

Web Cache Poisoning Lab: Serve Your Payload to Everyone

CacheServ caches each page by its URL and serves that copy to everyone. The app also reflects the X-Forwarded-Host header into the HTML — but that header is not part of the cache key. So one poisoned request can be stored and then handed to every visitor who asks for the same URL. Lab at a glance: Advanced · 110 XP · about 20 minutes · runs in your browser, no signup or setup. Try it yourself first; the full…

Read full article →

No comments:

Post a Comment