XSS via HTTP Parameter Pollution!

[@ManMan-cl1gg]

great explanation. Thank you

[@vanshajdhar9223]

Great explanation. Crystal clear

[@intigriti]

Glad it was helpful! 🔥

[@gdfghgfdti3097]

Loving for your all tutorial

[@intigriti]

Thanks so much 😊

[@gk_eth]

That's awesome explanation 🔥

[@intigriti]

Glad it was helpful! Now apply your knowledge on BB programs 🔥

[@eyadhussien1055]

Great video, Thanks sir

[@intigriti]

You are welcome 🔥

[@paperboygold]

Awesome content, thank you!

[@intigriti]

We are very glad you like it ❤️

[@zerocewl]

I'm confused when your saying its X-Cache: miss because its unkeyed but if you just keep sending it will HIT anyway? how do you know if its unkeyed or not

[@saket590acharya7]

Can we pass the parameters to repeater with a list of parameter payloads and check the responses?

[@intigriti]

You would use Intruder for that!

[@JuanBotes]

thanks for the content \o/

[@intigriti]

You are very welcome! 💪. Spread the word!

[@nathangriffiths8809]

Wow a lot to take in there.

[@intigriti]

That's a good thing, right? 😇

[@ismailachabi8627]

thank you

[@intigriti]

Very welcome! 💜

[@SecurityTalent]

Great

[@intigriti]

Thanks 😇

[@wrench2474]

so sir this was a cache poising attack

[@intigriti]

Yep, cache poisoning chained with HTTP parameter pollution and an XSS payload served to the victim!