Web Cache Poisoning: Hunting Methodology & Real-World Examples

[@dittonachan]

great explaination, loved it.

[@testauthoritytes9917]

Medusa reminds me modlishka. Anyway great explanation.
Some more points - you have worked on lazy loading cache hit and cache miss architecture that has a condition that this type of cache poisioning is only real of cache is updated.
There are some more architecture you may want to explore, its write through and session storing.
For write through architecture , cache is cant be poisoned or updated to be delivered to multiple users for same content of you are not writing to DB.
For session storing cached
architecture mechanisms xss will fall short and you may want to try csrf.

[@nishantdalvi9470]

Please make this sort of video for Oauth misconfiguration as well

[@smilehackermax]

Nice one!

[@mysteriousministar2481]

Nice video

[@Aquax1000]

Yo man hook me up with some BAC resources (not basics)

[@Bluesurfer-w8g]

Ps : don't use glitch screen background when explaining something, it's uncomfortable

[@testauthoritytes9917]

How comfortable is that when you have your website hosting different image or probably your user poset is changed or someone rides csrf and transfer legit amount from your digital wallet to some of your friend that you don't know.
Get used it if you are blue 🔵, life will be less stressful 😊

[@pratiksawant8119]

Agree