Cache Poisoning Courses and Certifications

Black Hat

Web Cache Entanglement - Novel Pathways to Poisoning

Explore novel web cache poisoning techniques, probing cache inconsistencies to build sophisticated exploit chains. Learn to uncover vulnerabilities in caching systems across the internet.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

Practical Web Cache Poisoning - Redefining 'Unexploitable'

Explore web cache poisoning techniques to compromise websites by exploiting caches and content delivery networks, turning them into exploit delivery systems targeting unsuspecting visitors.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Alto Envenenamiento del Cache en Windows - Explotación y Análisis

Descubre cómo explotar la vulnerabilidad de envenenamiento del cache de activación en Windows para obtener privilegios de administrador y ejecución de código con nivel de integridad alto.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Black Hat

Practical Web Cache Poisoning - Redefining 'Unexploitable'

Explore web cache poisoning techniques to compromise websites by exploiting caches and content delivery networks, turning them into exploit delivery systems targeting unsuspecting visitors.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Black Hat

Dirty Bin Cache - A New Code Injection Poisoning Binary Translation Cache

Uncover a novel code injection vulnerability in Rosetta 2, exploring its impact on Apple Silicon Macs and discussing potential security implications for binary translation caches.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

USENIX

POPS - From History to Mitigation of DNS Cache Poisoning Attacks

Discover POPS, a novel DNS cache poisoning prevention system that integrates with IPS to detect and mitigate statistical attacks with zero false positives using simple rules and TC flag enhancement.

• YouTube
• 17 minutes
• On-Demand
• Free Video

OWASP Foundation

Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSec EU 2017

Explore CORS misconfigurations and their security implications, including real-world attacks on bitcoin exchanges and Google. Learn about subtle vulnerabilities and exploit techniques for web security professionals.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Black Hat

HTTP Desync Attacks - Request Smuggling Reborn

Explore HTTP request smuggling techniques to bypass security, manipulate web infrastructure, and exploit vulnerabilities. Learn detection, confirmation, and exploitation methods for various attack scenarios.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

John Savill's Technical Training

How DNS Works - Understanding Domain Name System Resolution and Hierarchy

Explore DNS functionality, hierarchy, and resolution process. Learn about caching, security risks, and forwarding in this comprehensive overview of how DNS operates.

• YouTube
• 30 minutes
• On-Demand
• Free Video

OWASP Foundation

Exploiting CORS Misconfigurations for Bitcoins and Bounties

Explore CORS misconfigurations and their exploitation potential, including real-world examples of vulnerabilities in bitcoin exchanges and major websites. Learn about specification flaws and mitigation strategies.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Black Hat

Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond

Explore HTTP header smuggling techniques to bypass security measures, attack web applications, and exploit vulnerabilities in proxy servers and AWS services.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Black Hat

HTTP Desync Attacks - Smashing into the Cell Next Door

Explore techniques for HTTP request splicing, enabling remote attackers to manipulate web infrastructure, exploit visitors, and breach system isolation. Learn detection, case studies, and mitigation strategies.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

DEFCONConference

Practical Exploitation of DoS in Bug Bounty Programs

Discover practical techniques for identifying and exploiting DoS vulnerabilities in bug bounty programs, covering N+1 errors, GraphQL crashing, and Cache Poisoning with real-world examples and responsible reporting practices.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Exploiting IPC With New Desynchronization Primitives

Exploración de vulnerabilidades críticas en SAP, demostrando técnicas avanzadas de explotación HTTP y desincronización para comprometer sistemas empresariales. Incluye demostraciones prácticas y análisis de impacto en la seguridad global.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

NorthSec

Request Smuggling 101

Explore HTTP Request Smuggling attacks, risks, and payloads. Learn to detect and mitigate vulnerabilities in load balancers and proxies. Includes live demonstration and practical mitigation strategies.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk