In r/bugbounty, a detailed cache deception writeup triggers debate on whether these web cache issues require intuition-heavy manual work or can be reliably automated with small fuzzing scripts over separator and encoding combinations.
This will be a long post explaining the logic behind the finding. You'll need a basic CDN knowledge.
cache-deception and all the other cache poisoning stuff are actually things that are really easy to spot with automation.
There are only so many separators, and only so many combinations of raw or encoded possible. It is literally 10 lines of co
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new authority voices, debates, and emerging ideas.
← Back to Cyber Security