Wednesday, July 26, 2017

Web Cache Deception Attack: White Paper

The Web Cache Deception attack vector was first published in this blog on February 2017. Since then, I presented it on Black Hat USA 2017 and BSides Tel-Aviv 2017.

Now, I'm proud to release a white paper explaining all about this attack, including:
- Attack methodology
- Implications
- Conditions
- Known web frameworks and caching mechanisms that meet the attack conditions
- Mitigations


In addition, you can find the presentation used in the Black Hat USA 2017 conference.

Huge thanks to all those who assisted along the way:
Sagi Cohen, Bill Ben Haim, Sophie Lewin, Or Kliger, Gil Biton, Yakir Mordehay, Hagar Livne

Would love to receive your feedback here and on Twitter (@omer_gil).

Enjoy!

56 comments:


  1. topmedsreview: Provide the best information about anxiety, panic disorder, mental stress, depression, Hyperactivitys issuse. Top meds review is a social platform providing the best medical information, medicine review, and health guidance. Our website provides credible information, depth reference material about health subjects that matter to everyone.

    Anxiety Medicines
    Soma Addiction
    Types Of Xanax Bars

    ReplyDelete
  2. Excellent article. Keep writing such kind of information on your blog .
    Im really impressed by it.
    buy marijuana online
    You’ve performed a fantastic job. I’ll definitely
    digg it and for my part recommend to my friends. I’m confident they’ll be
    benefited from this web site.
    marijuana for sale
    buy marijuana
    buy marijuana online usa
    buy marijuana online
    buy weed online usa
    buy weed online
    marijuana for sale
    order weed online
    buy cannabis online
    cannabis for sale
    weed for sale online
    weed for sale
    buy pot online
    buy cbd oil online
    kush for sale
    cbd oil for sale
    dankwoods
    dankwoods for sale

    ReplyDelete
  3. Excellent article. Keep writing such kind of information on your blog .
    Im really impressed by it.
    buy marijuana online
    You’ve performed a fantastic job. I’ll definitely
    digg it and for my part recommend to my friends. I’m confident they’ll be
    benefited from this web site.
    marijuana for sale
    buy marijuana
    buy marijuana online usa
    buy marijuana online
    buy weed online usa
    buy weed online
    marijuana for sale
    order weed online
    buy cannabis online
    cannabis for sale
    weed for sale online
    weed for sale
    buy pot online
    buy cbd oil online
    kush for sale
    cbd oil for sale
    dankwoods
    dankwoods for sale

    ReplyDelete
  4. Excellent article. Keep writing such kind of information on your blog .
    Im really impressed by it.
    buy marijuana online
    You’ve performed a fantastic job. I’ll definitely
    digg it and for my part recommend to my friends. I’m confident they’ll be
    benefited from this web site.
    marijuana for sale
    buy marijuana
    buy marijuana online usa
    buy marijuana online
    buy weed online usa
    buy weed online
    marijuana for sale
    order weed online
    buy cannabis online
    cannabis for sale
    weed for sale online
    weed for sale
    buy pot online
    buy cbd oil online
    kush for sale
    cbd oil for sale
    dankwoods
    dankwoods for sale

    ReplyDelete
  5. KN95 Mask Wholesale & OEM for Prevention of COVID-19 !

    KN95 Mask Wholesaler | Manufacturer & trading company from China. 2020 latest kn95 disposable mask, spot wholesaler, selling 5-layer dust-proof air anti-virus mask n955 mask. Buy KN95 Masks for Prevention of COVID-19 today! FREE SHIPPING GLOBAL, SHIPPING IN 1-3 DAYS!

    KN95 Mask
    Mask wholesale
    Mask OEM
    Dust Mask
    5-Layer Face Mouth Mask
    Protection Safety Mask

    ReplyDelete
  6. I found so many interesting stuff in your blog especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the enjoyment here! keep up the good work…
    web design agency

    ReplyDelete
  7. This is my first time i visit here. I found so many interesting stuff in your blog especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the enjoyment here! keep up the good work. app development companies near me

    ReplyDelete
  8. Thank you for your post. This is useful information.
    Here we provide our special one's.
    Java Internships in hyderabad

    ReplyDelete
  9. Best Article buy Pain Pills online Excellent post. I appreciate this site. Stick with it! Because the admin of this web page is working.
    Best Article buy Roxicodone online Excellent post
    buy Xanax online
    buy Oxycodone online
      buy Weed online

    Best Article buy Medical Marijuana online Excellent post.This website was how do you say it? Relevant!! Finally, I’ve found something that helped me.

    buy Weed online

    buy Meltblown Nonwoven Fabric online

      buy Roxicodone 30mg online 

    buy Research Chemicals online 
    buy CBD ISOLATE online     

    ReplyDelete
  10. Body to Body massage is the best therapy to provide total relaxation to an individual. Here at our Kharar Escort, you can get hot massage therapy available at affordable prices by experienced women. We are here to fulfill our client's need and desires and if you need a hot and sexy massage therapy than it is our duty to complete their wishes.
    Follow us:-
    Kharar Escorts
    Kharar Escorts Service
    Kharar Call Girls

    ReplyDelete
  11. Escorteuro.eu is an independent service for adult entertainment, escort and massage services in Europe, at the moment we are in Denmark, Norway, Sweden and Germany in the future we will be all Europe, girls from all over the countries are represented in Escorteuro.eu, and are all independent, we only provide classified ads for these girls. Every service, escort, massage or just friendly companionship is possible within Escorteuro.eu, everybody needs a friendly companionship from time to time. In case your a tourist in Denmark, Sweden, Norway or Germany, you will find a variety of different personalities within escorteuro.eu as well as a large range of different services, you may find whatever you like. Escort, massage and companionship for everybody in Copenhagen, Ålborg, Århus, Roskilde, and other cities in Denmark. Your satisfaction is Escorteuro.eus goal. You will find every single service from kind to kinky, as well as domination.

    European dating sites
    Adult classified site in denmark
    Adult entertainment foreign girls

    ReplyDelete
  12. Hey Guys...Thanks!! for sharing this information blog. This blog are very informative.
    Detroit Real Estate Wanted

    ReplyDelete
  13. Last month, when i visited your blog i got an error on the mysql server of yours.*~,”*
    Punjab News

    ReplyDelete
  14. The presentation of the article is very good, ikinci el saat Every word written has a meaning and is very useful for the readers. ümraniye escort I hope that you can write useful articles for readers this, ikinci el saat alan yerler we also have several articles that are also interesting to read.

    ReplyDelete
  15. We take charge with 24/7 Emergency Alarm response notification you have an option with us to do it yourself or have a monitoring supervisor do it for you. we believe in providing Tailored security as per each individual client. Help is only a button press away – all our operators speak with the user directly through the Medical Alert. No landline or installation required – Product arrives ready to use. Mobile Medical Alert System enables the user to alert an Emergency wherever, whenever. Automatic Fall Detection features, incase you can't press the button. Magnetic charger and voice activation for the partially sighted and those with dexterity. Download our APP for Android & IOS – Suitable for Family members or carers. Receive instant SOS and Fall notifications wherever, whenever. Have full control over your loved one's preferences and talk directly to user through your smartphone to the Medical Alert System. Brahma Yoga Yoga 4th July Maharaja Express Fare #emergencycare #olderlycare #oldagecare #telecare #healthcare #wellness Health Wellness Old Age Care, Elderly Care

    ReplyDelete
  16. Thanks for sharing the valuable information here. So i think i got some useful information with this content. Thank you and please keep update like this informative details. url submission sites list

    ReplyDelete
  17. We give the magnificence full and experienced Dwarka Escorts Service which is good enough behavior in nature and gives you the best hearty evenings. We have all the experience and high educative great business superb Dwarka call girls partners who are keen on you to achieve your desires.

    ReplyDelete
  18. Take Enjoyments From Tongue With Hot Udaipur Escorts

    Udaipur Call girls need a young play boy for fun privately room ,Unhappy wife need very Discrete .I'm a Udaipur Escort trying to find a husband for very discreet adult fun. will give full satisfaction on my bed,this is few hours paid relationship only,all types of services consistent with your exception unconditionally with all comforts and with none disturbance
    Escorts Udaipur
    Udaipur Escorts Agency

    ReplyDelete
  19. I really appreciate for your writing. This blog is very much useful. ludo tricks

    ReplyDelete
  20. Thank you for sharing valuable information. Nice post. I enjoyed reading this post. funny usernames

    ReplyDelete