ctf.nitaimaarek.com Tracks Leaderboard Log in Sign up

Tracks / Web Cache Poisoning

Web Cache Poisoning

Web cache poisoning, cache deception, key confusion, and cache-hit timing side channels. The bugs that live in the gap between what the cache keys on and what the origin actually uses.

Learn

1. The cache key is the whole game 6 min read
2. Reading cache headers 4 min read

Labs

Medium 30 pts

One unkeyed header, served to everyone.

Medium 35 pts

A private page, cached in public.

Hit or Miss

analysis

Hard 40 pts

A cache hit is a yes/no answer.