domains / families / security / performing-web-cache-deception-attack

performing-web-cache-deception-attack

separate

Executes web cache deception attacks by exploiting path normalization

When to use

• When testing applications behind CDNs or reverse proxies (Cloudflare, Akamai, Varnish, Nginx)
• During assessment of authenticated page caching behavior
• When evaluating path normalization differences between caching and origin layers
• During bug bounty hunting on applications with aggressive caching policies
• When testing for sensitive data exposure through cache layer misconfiguration

Skill page

Source