Web Cache Deception via Delimiter Discrepancies
Second web cache deception writeup: brute-forcing path delimiters with Burp Intruder to find one the origin honours but the cache ignores, then caching another user's API key.
Tag
2 posts tagged #web-cache.
Second web cache deception writeup: brute-forcing path delimiters with Burp Intruder to find one the origin honours but the cache ignores, then caching another user's API key.
First writeup in a web cache deception series: a path mapping mismatch between a REST-style origin and a static-file cache lets me get another user's API key cached and read it back.