Web Cache Entanglement: Novel Pathways to Poisoning - James Kettle (albinowax)

[@tanveeraalam3271]

@albinowax you're the most awesome hacker. And your talks are always top notch.

[@LetsGoTech]

The best video on this topic so far

[@Mersal-tq9lm]

26:14 the callback parameter was cache key and both ROR & CDN caches are splitting the parameters with & and ; . So why didn't the CDN notice that the callback parameter is different from the UTM_content parameter. So the CDN cache key for callback didn't even notice that the same cache key parameter is repeating second time?
Why it wasn't, like
callback(keyed)&(unkeyed); callback(keyed).

[@potatoonastick2239]

What the hell? Cloudflare of all services doesn't think the unkeyed port param cache poisoning is an issue? What drugs are they taking, leaving in a vulnerability like that? I'm honestly baffled. Anyway thanks for the research man, this is some truly top quality stuff

[@BehradJi]

Thank you so much, sir!

[@jaylee5915]

thanks james allways mind blowing !!!!!!

[@luv2stack]

Good stuff but what about Cloudfront?

[@shubham_srt]

Thank you for what you do

[@andreys1071]

Very helpful, like always) thank you so much

[@OmarAli-gm4db]

Awesome Research

[@shamimi123]

Awesome! thanks James!
A gif is needed to be made from 42:40 :D

[@maaldai6452]

Amazing !!!

[@SuperTechrobin]

thanks you so much to share your great knowledge with us thanks you sir

[@Emineministt]

"for my next trick"

[@christianhernandez5208]

Dope %amazing masterpiece

[@djangoWarri0r]

That's good. Thank you

[@SuperTechrobin]

love you sir

[@ankittathe866]

True Legend !

[@ahmedrazaidrisi6647]

To let's go kick the cache with method of albinowax

[@gonzalocarrasco]

Thank you. Always as a crack.

[@amanzholzhalynuly1881]

good job :)

[@goodboy8833]

First Comment, love James Research

[@samindunimsara]

යො බොසා

[@sivasiva-sh6hl]

100th like