Web Cache Deception via Delimiter Discrepancies
Second web cache deception writeup: brute-forcing path delimiters with Burp Intruder to find one the origin honours but the cache ignores, then caching another user's API key.
Category
Writeups
Lab writeups from PortSwigger Web Security Academy and other platforms: recon, hypothesis, working exploit, root cause.