Lead AI Strategy with UCSB's Agentic AI Program — Microsoft Certified
Future-Proof Your Career: AI Manager Masterclass
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
Explore the security implications of Edge Side Includes (ESI) in this 22-minute Black Hat conference talk. Delve into how this legacy technology, still prevalent in popular HTTP surrogates, can be exploited for web-based attacks. Learn about the potential vulnerabilities in caching servers and load balancers that have become crucial to Internet infrastructure. Discover how ESI's design can be leveraged for Server-Side Request Forgery (SSRF) and transparent session hijacking. Gain insights from speaker Louis Dion-Marcil on this unexplored attack vector and its impact on web security.
Syllabus
Edge Side Include Injection: Abusing Caching Servers into SSRF and Transparent Session Hijacking
Taught by
Black Hat