Web cache poisoning via ambiguous requests (Video solution, Audio)

[@joshk8554]

Second host header gives me an internal server error response

[@nandorb999]

Same here

[@francescodeb98]

put the arbitrary host header first, then the correct one, i got it to work this way

[@KillianMack]

I stumbled on this same issue and eventually created a new `Get` request from the browser and noticed the second host now worked. Comparing and testing both requests it appears with the addition of the `Cookie: session:...; _lab:...` header the request now worked with the added second Host. Why this is, I have no idea.

[@hackerhonorer2809]

Sir...In Real case...What is Exploit Server?

[@nemesimusic1291]

a web server you control

[@johannasgutenberg4048]

Thank--You

[@ascaniotrovatoakadh60m97]

nice