Lab: Targeted web cache poisoning using an unknown header

[@netletic]

Hey everyone! Check out this playlist for all my solutions to the Web Cache Poisoning labs from PortSwigger: kzbin.info/aero/PLGb2cDlBWRUUvoGqcCF1xe86AaRXGSMT5 Here are the timestamps for this video - ⏱ 00:00 - Intro 00:23 - Identify a suitable cache oracle 00:55 - what is the Vary: User-Agent Response Header 01:20 - User-Agent request header as a cache buster 01:51 - Find the unknown header with Param Miner 02:49 - Explore the input potential 04:59 - Find the User-Agent of our victim

[@madatch9947]

Hello great video. When I try to send X-Host request I do not get an output it is stuck on waiting. If I delete the header I get the response just fine. Do you know how to fix this?

[@wardnproject4599]

me too