Web Cache Entanglement: Novel Pathways to Poisoning - James Kettle (albinowax)

[@tanveeraalam3271]

@albinowax you're the most awesome hacker. And your talks are always top notch.

[@LetsGoTech]

The best video on this topic so far

[@Mersal-tq9lm]

26:14 the callback parameter was cache key and both ROR & CDN caches are splitting the parameters with & and ; . So why didn't the CDN notice that the callback parameter is different from the UTM_content parameter. So the CDN cache key for callback didn't even notice that the same cache key parameter is repeating second time? Why it wasn't, like callback(keyed)&(unkeyed); callback(keyed).

[@jaylee5915]

thanks james allways mind blowing !!!!!!

[@luv2stack]

Good stuff but what about Cloudfront?

[@BehradJi]

Thank you so much, sir!

[@potatoonastick2239]

What the hell? Cloudflare of all services doesn't think the unkeyed port param cache poisoning is an issue? What drugs are they taking, leaving in a vulnerability like that? I'm honestly baffled. Anyway thanks for the research man, this is some truly top quality stuff

[@andreys1071]

Very helpful, like always) thank you so much

[@shubham_srt]

Thank you for what you do

[@shamimi123]

Awesome! thanks James! A gif is needed to be made from 42:40 :D

[@OmarAli-gm4db]

Awesome Research

[@SuperTechrobin]

thanks you so much to share your great knowledge with us thanks you sir

[@maaldai6452]

Amazing !!!

[@christianhernandez5208]

Dope %amazing masterpiece

[@ankittathe866]

True Legend !

[@gonzalocarrasco]

Thank you. Always as a crack.

[@djangoWarri0r]

That's good. Thank you

[@SuperTechrobin]

love you sir

[@Emineministt]

"for my next trick"

[@goodboy8833]

First Comment, love James Research

[@amanzholzhalynuly1881]

good job :)

[@ahmedrazaidrisi6647]

To let's go kick the cache with method of albinowax

[@samindunimsara]

යො බොසා

[@sivasiva-sh6hl]

100th like