Web cache poisoning

Identify the vulnerability

  1. check HTTP response headers :-

Cache-Control, Expires, ETag, Last-Modified, and Vary
  1. Browser Developer Tools:

dev tools >> network >> reload >> check cache directives
  1. Understand the application's architecture and infrastructure , check for :-

CDN - content delievery network, reverse proxy, any caching layers

Last updated