Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Practical Web Cache Poisoning - Redefining 'Unexploitable'

Black Hat via YouTube

Start learning Write review
Boot.dev Ad

The Most Addictive Python and SQL Courses

Learn More → Corporate Finance Institute Ad

Build the Finance Skills That Lead to Promotions, Not Just Certificates

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This course presents practical methods for detecting, exploiting, and defending against server-side web cache poisoning. It covers cache keys, unkeyed inputs, selective poisoning, exploit chaining, resource hijacking, and defenses through demonstrations on real-world web applications and infrastructure.

Syllabus

Intro
Param Miner
Outline
Caching Threat Landscape
Cache poisoning objective
Cache keys
Cache key collisions
Cache Poisoning Methodology
Trusting headers
Unkeyed input detection
Explore and Inject
Seizing the Cache
Selective poisoning
DOM Poisoning
Mystery Interaction
Mozilla SHIELD
Chaining Unkeyed Inputs
Hidden Route Poisoning
Resource Hijacking
Open Graph hijacking
Cross-Cloud Poisoning: Cloudflare
Beyond fake hosts
External cache poison (1/3)
Internal cache poison (2/3)
Drupal Open redirect (3/3)
Combining ingredients
Defense
Takeaways

Taught by

Black Hat

Reviews

Start your review of Practical Web Cache Poisoning - Redefining 'Unexploitable'

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.