Wednesday, July 26, 2017

Web Cache Deception Attack: White Paper

The Web Cache Deception attack vector was first published in this blog on February 2017. Since then, I presented it on Black Hat USA 2017 and BSides Tel-Aviv 2017.

Now, I'm proud to release a white paper explaining all about this attack, including:
- Attack methodology
- Implications
- Conditions
- Known web frameworks and caching mechanisms that meet the attack conditions
- Mitigations


In addition, you can find the presentation used in the Black Hat USA 2017 conference.

Huge thanks to all those who assisted along the way:
Sagi Cohen, Bill Ben Haim, Sophie Lewin, Or Kliger, Gil Biton, Yakir Mordehay, Hagar Livne

Would love to receive your feedback here and on Twitter (@omer_gil).

Enjoy!

63 comments:


  1. This site is helping for every person and easily get money through the bitcoin ATM card. Please visit this site for bitcoin atm card ranking. you can change any money into another currency in anywhere in the world

    ReplyDelete
  2. The Escorts in Karachi are very talented, as not only they are completely beautiful but also know how they can be best as your partners.
    Karachi Call Girls
    She is a perfect busty escorts Karachi girl who can switch on your smile ... parts of Karachi for in-call as well as out-call, such as defence etc.
    https://karachicalgirlsescorts.com/

    ReplyDelete
  3. There is no better idea of keeping your mobile loaded with balance all the time. If you are also looking for any useful way to utilize your top up phone with bitcoin then hurry up and avail our service as much as can. There is no limit of it. Make your mobile life happier with balance recharge through NETELL.NET. COME SOON .THANK YOU .

    ReplyDelete
  4. Interesting information and attractive.This blog is really rocking... Yes, the post is very interesting and I really like it.I never seen articles like this. I meant it's so knowledgeable, informative, and good looking site. I appreciate your hard work. Good job.
    Kindly visit us @
    Sathya Online Shopping
    Buy AC Online | AC Online Shopping | AC Price | Buy Air Conditioner Online
    Inverter Split AC | Best Inverter AC | Split AC Price | Buy Split AC Online
    Smart LED TV | Smart TV Price | LED TV Online | Buy LED TV Online
    Laptop Online | Laptop Price | Buy Laptop Online | Best Laptop
    Buy HD LED TV
    Buy Ultra HD TV Online
    Buy Mobile Online | Buy Smartphone Online in India

    ReplyDelete


  5. Lopamudra Creative app design agency can provide your business with a full scale digital and creative solution designed to increase your online marketability.

    App Design Company India
    creative agency in gurgaon
    creative app design agency
    advertising agencies
    advertising agency in gurgaon
    marketing and advertising companies
    best advertising agency in india

    ReplyDelete

  6. Lopamudra Creative app design agency can provide your business with a full scale digital and creative solution designed to increase your online marketability..

    App Design Company India
    creative agency in gurgaon
    creative app design agency
    advertising agencies
    advertising agency in gurgaon
    marketing and advertising companies
    best advertising agency in india

    ReplyDelete
  7. Nice Information, your blog is sharing unique information....
    Thanks for sharing!!!
    independent house for sale
    good builders in hydearabad
    premium flat in madhapur

    ReplyDelete

  8. At Lopamudra Creative, we do our best to create the perfect branding for your business and try to live up to our name of one of the creative branding agency in India.

    App Design Company India
    creative agency in gurgaon
    creative app design agency
    advertising agencies
    advertising agency in gurgaon
    marketing and advertising companies
    best advertising agency in india

    ReplyDelete
  9. Hai,
    Thanks for sharing with us.”
    It’s really a great and valuable piece of info
    Color Waves Media-The Best Creative Ad Agency in Hyderabad

    ReplyDelete
  10. Thanks for this article very helpful. thanks.
    Airconditioning

    ReplyDelete
  11. Thanks a lot for sharing this amazing knowledge with us. web designing services in hyderabadThis site is fantastic. I always find great knowledge from it.
    web design services in hyderabad

    ReplyDelete
  12. This is Very very nice article. Everyone should read. Thanks for sharing. Don't miss WORLD'S BEST TraindDrivingSimulatorFreeGames

    ReplyDelete
  13. Thank you for sharing this impressive blog for web development company India. Here The blog shares nice information on the topic with great examples. I am hoping the same best work from you in the future.

    ReplyDelete
  14. Excellent Post! Vowels Advertising; leading Brand Consultancy & Advertising Agencies in India offers Content Marketing, Video Production Services, Strategic Solutions & Digital Marketing in Dubai, Abu dhabi & Jaipur Delhi Mumbai Chennai Bangalore, India.

    ReplyDelete
  15. Thanks for your information; you have such great knowledge on these criteria. It’s really helpful to me. web development Hyderabad

    ReplyDelete
  16. I would like to thank you for the endeavours you have made this blog for web design company India.

    ReplyDelete
  17. buy alprazolam,ketamine,mdma,crystal meth,fentanyl at https://shop4herbalincense.com

    Order Fentanyl, Oxycodone, Buy Mephedrone online, Xanax Bars , Percs , Roxicodone at low cost..With us , you get meds discreet with no prescription. We've worked to create a fast,
    efficient and fair system for order processing. We know you want your order quickly, at the lowest possible cost.Check some of our highly purchased meds;

    We are the best supplier of pain medications and research chemicals .our prices are affordable .
    For more details contact our website through any of the details provided below
    Management

    Visit: https://shop4herbalincense.com


    Call: +1 (925)-338-9583 (USA/Canada)

    whatsapp: +1 (925)-338-9583

    ReplyDelete
  18. Thanks for sharing the helpful answer to me. It would be helpful to us.

    Regards,
    top digital agency in india | search engine optimization services in India


    ReplyDelete
  19. Legit Online Drug Supplier Welcome legit online drugstore buy all your pills here, cocaine for sale online, buy ecstasy, amphetamine pills, crack, cocaine

    Buy Fentanyl online

    Buy Pure Grade Heroin online

    Buy Cocaine Powder online

    Buy Ghb powder for sale

    https://buycocaineonline.se

    ReplyDelete
  20. Thanks for your valuable information. The best software company i wish to mention which is good in developing the software's.
    web development mnc companies in bangalore

    ReplyDelete
  21. Hi
    There,
    Thank you for sharing a knowledgeable blog with us I hope that you will post many more blog with us:

    Purchase Cocaine Online, Cocaine for the most part called coke, is a solid stimulant by and large utilized as a recreational drug.
    It is routinely grunted, took in as smoke, or isolated and permeated into a vein. Mental impacts may solidify loss of contact with this present reality, a wonderful finish of happiness, or tumult.

    Click here for Buy Cocaine Online

    ReplyDelete
  22. Great Content & Site.
    Absolutely Clean is a popular origination that provides services like crime scene clean up, blood cleanup, Biohazard Cleanup in Utah Craig Colorado etc. We are available 24x7 nationwide in your service. Please contact us for more information.

    ReplyDelete
  23. This comment has been removed by the author.

    ReplyDelete
  24. Thanks for your fabulous post! I enjoy while reading your post. I want to encourage yourself to continue to share fabulous posts, have a nice day! If any want to website development, web development services, SEO services and SMO Services in USA. Then contact for SMO Company in USA .

    ReplyDelete
  25. Best Article buy pain meds online Excellent post. I appreciate this site. Stick with it! Because the admin of this web page is working, no doubt very quickly it will be well-known, due to its quality contents.This website was how do you say it? Relevant!! Finally, I’ve found something that helped me.
    Best Article buy Roxicodone Online Excellent post
    buy Xanax Online
    buy Oxycodone Online

    Best Article buy medications online Excellent post. I appreciate this site. Stick with it! Because the admin of this web page is working, no doubt very quickly it will be well-known, due to its quality contents.This website was how do you say it? Relevant!! Finally, I’ve found something that helped me.
    buy Roxicodone Online

    ReplyDelete
  26. Hi
    There,
    Thank you for sharing a knowledgeable blog with us I hope that you will post many more blog with us:
    please visit our site custom logo design

    ReplyDelete
  27. [3:33 AM, 10/26/2019] Vado:
    [4:28 PM, 10/26/2019] Vado: Are you looking for where to buy the best dank vapes and carts online? then search no more, purelightextracts.com is here to provide you with the best mushrooms at cheaper rates and discrete overnight delivery.
    dank vapes cartridges for sale

    dank carts

    dank vapes official

    dank vapes flavors

    dankvapes

    diamond og dank vapes

    dank vapes king louie

    ReplyDelete
  28. Valuable for Information..is there is any another information related this then kindly inform me....
    Destech Media
    Destech Media Pvt. Ltd.

    ReplyDelete