Wednesday, July 26, 2017

Web Cache Deception Attack: White Paper

The Web Cache Deception attack vector was first published in this blog on February 2017. Since then, I presented it on Black Hat USA 2017 and BSides Tel-Aviv 2017.

Now, I'm proud to release a white paper explaining all about this attack, including:
- Attack methodology
- Implications
- Conditions
- Known web frameworks and caching mechanisms that meet the attack conditions
- Mitigations


In addition, you can find the presentation used in the Black Hat USA 2017 conference.

Huge thanks to all those who assisted along the way:
Sagi Cohen, Bill Ben Haim, Sophie Lewin, Or Kliger, Gil Biton, Yakir Mordehay, Hagar Livne

Would love to receive your feedback here and on Twitter (@omer_gil).

Enjoy!

28 comments:


  1. This site is helping for every person and easily get money through the bitcoin ATM card. Please visit this site for bitcoin atm card ranking. you can change any money into another currency in anywhere in the world

    ReplyDelete
  2. The Escorts in Karachi are very talented, as not only they are completely beautiful but also know how they can be best as your partners.
    Karachi Call Girls
    She is a perfect busty escorts Karachi girl who can switch on your smile ... parts of Karachi for in-call as well as out-call, such as defence etc.
    https://karachicalgirlsescorts.com/

    ReplyDelete
  3. There is no better idea of keeping your mobile loaded with balance all the time. If you are also looking for any useful way to utilize your top up phone with bitcoin then hurry up and avail our service as much as can. There is no limit of it. Make your mobile life happier with balance recharge through NETELL.NET. COME SOON .THANK YOU .

    ReplyDelete
  4. Interesting information and attractive.This blog is really rocking... Yes, the post is very interesting and I really like it.I never seen articles like this. I meant it's so knowledgeable, informative, and good looking site. I appreciate your hard work. Good job.
    Kindly visit us @
    Sathya Online Shopping
    Buy AC Online | AC Online Shopping | AC Price | Buy Air Conditioner Online
    Inverter Split AC | Best Inverter AC | Split AC Price | Buy Split AC Online
    Smart LED TV | Smart TV Price | LED TV Online | Buy LED TV Online
    Laptop Online | Laptop Price | Buy Laptop Online | Best Laptop
    Buy HD LED TV
    Buy Ultra HD TV Online
    Buy Mobile Online | Buy Smartphone Online in India

    ReplyDelete


  5. Lopamudra Creative app design agency can provide your business with a full scale digital and creative solution designed to increase your online marketability.

    App Design Company India
    creative agency in gurgaon
    creative app design agency
    advertising agencies
    advertising agency in gurgaon
    marketing and advertising companies
    best advertising agency in india

    ReplyDelete

  6. Lopamudra Creative app design agency can provide your business with a full scale digital and creative solution designed to increase your online marketability..

    App Design Company India
    creative agency in gurgaon
    creative app design agency
    advertising agencies
    advertising agency in gurgaon
    marketing and advertising companies
    best advertising agency in india

    ReplyDelete
  7. Nice Information, your blog is sharing unique information....
    Thanks for sharing!!!
    independent house for sale
    good builders in hydearabad
    premium flat in madhapur

    ReplyDelete

  8. At Lopamudra Creative, we do our best to create the perfect branding for your business and try to live up to our name of one of the creative branding agency in India.

    App Design Company India
    creative agency in gurgaon
    creative app design agency
    advertising agencies
    advertising agency in gurgaon
    marketing and advertising companies
    best advertising agency in india

    ReplyDelete
  9. Hai,
    Thanks for sharing with us.”
    It’s really a great and valuable piece of info
    Color Waves Media-The Best Creative Ad Agency in Hyderabad

    ReplyDelete
  10. Thanks for this article very helpful. thanks.
    Airconditioning

    ReplyDelete
  11. Thanks a lot for sharing this amazing knowledge with us. web designing services in hyderabadThis site is fantastic. I always find great knowledge from it.
    web design services in hyderabad

    ReplyDelete
  12. This is Very very nice article. Everyone should read. Thanks for sharing. Don't miss WORLD'S BEST TraindDrivingSimulatorFreeGames

    ReplyDelete
  13. Thank you for sharing this impressive blog for web development company India. Here The blog shares nice information on the topic with great examples. I am hoping the same best work from you in the future.

    ReplyDelete