Web Cache Poisoning: Hunting Methodology & Real-World Examples

[@kashif_ali6919]

voice + guidence i love that

[@rajmaharjan5437]

glad I found this gem :)

[@Medusa0xf]

Thanks!

[@user-tr3sh8tp9p]

Great explanation. Thanks

[@comosaycomosah]

well put together

[@Medusa0xf]

Glad you liked it!

[@dittonachan]

great explaination, loved it.

[@Medusa0xf]

Thank you!

[@H4ckerNafeed]

The tiny note name? where u using to save payloads?

[@senlin9414]

Great Content, but the background shouldn't be flickering.

[@Medusa0xf]

Thanks for the tip

[@testauthoritytes9917]

Medusa reminds me modlishka. Anyway great explanation. Some more points - you have worked on lazy loading cache hit and cache miss architecture that has a condition that this type if cache poisioning is only real of cache is updated. There are some more architecture you may want to explore, its write through and session storing. For write through architecture , cache cant be poisoned or updated to be delivered to multiple users for same content if you are not writing to DB. For session storing cached architecture mechanisms xss will fall short and you may want to try csrf.

[@Medusa0xf]

How about you share some articles for this on my server?

[@wmpdx7]

Love you 😘👌

[@nishantdalvi9470]

Please make this sort of video for Oauth misconfiguration as well

[@Medusa0xf]

Noted

[@smilehackermax]

Nice one!

[@Medusa0xf]

Thanks!

[@mysteriousministar2481]

Nice video

[@Medusa0xf]

Thank you!

[@halfman.halfamazing3113]

Unable to focus while stuff running on the background with distracting music, it would be better if the video is some calm or lofi stuff.

[@Aquax1000]

Yo man hook me up with some BAC resources (not basics)

[@Medusa0xf]

You should hear this podcast. kzbin.info/www/bejne/rWWQkKqalLeYjpYsi=hnBOCR2AioksJdFH

[@Aquax1000]

@@Medusa0xf I hate that smile do you have any other resources where you are the only one like same as this video. I love your blog but it's very nice to see any video on that. If you don't mind Medusa I'm doing fully manual testing now including BAC,Auth and OAuth so can you tell me am I missing out on something here ?

[@Bluesurfer-w8g]

Ps : don't use glitch screen background when explaining something, it's uncomfortable

[@testauthoritytes9917]

How comfortable is that when you have your website hosting different image or probably your user poset is changed or someone rides csrf and transfer legit amount from your digital wallet to some of your friend that you don't know. Get used it if you are blue 🔵, life will be less stressful 😊

[@pratiksawant8119]

Agree

[@shouvikkundu8289]

Yup it's kinda make us distract

[@Medusa0xf]

Okay

[@bambastala7446]

Don't use anime it's distracting