Wednesday, July 26, 2017

Web Cache Deception Attack: White Paper

The Web Cache Deception attack vector was first published in this blog on February 2017. Since then, I presented it on Black Hat USA 2017 and BSides Tel-Aviv 2017.

Now, I'm proud to release a white paper explaining all about this attack, including:
- Attack methodology
- Implications
- Conditions
- Known web frameworks and caching mechanisms that meet the attack conditions
- Mitigations


In addition, you can find the presentation used in the Black Hat USA 2017 conference.

Huge thanks to all those who assisted along the way:
Sagi Cohen, Bill Ben Haim, Sophie Lewin, Or Kliger, Gil Biton, Yakir Mordehay, Hagar Livne

Would love to receive your feedback here and on Twitter (@omer_gil).

Enjoy!

105 comments:


  1. topmedsreview: Provide the best information about anxiety, panic disorder, mental stress, depression, Hyperactivitys issuse. Top meds review is a social platform providing the best medical information, medicine review, and health guidance. Our website provides credible information, depth reference material about health subjects that matter to everyone.

    Anxiety Medicines
    Soma Addiction
    Types Of Xanax Bars

    ReplyDelete
  2. Excellent article. Keep writing such kind of information on your blog .
    Im really impressed by it.
    buy marijuana online
    You’ve performed a fantastic job. I’ll definitely
    digg it and for my part recommend to my friends. I’m confident they’ll be
    benefited from this web site.
    marijuana for sale
    buy marijuana
    buy marijuana online usa
    buy marijuana online
    buy weed online usa
    buy weed online
    marijuana for sale
    order weed online
    buy cannabis online
    cannabis for sale
    weed for sale online
    weed for sale
    buy pot online
    buy cbd oil online
    kush for sale
    cbd oil for sale
    dankwoods
    dankwoods for sale

    ReplyDelete
  3. Excellent article. Keep writing such kind of information on your blog .
    Im really impressed by it.
    buy marijuana online
    You’ve performed a fantastic job. I’ll definitely
    digg it and for my part recommend to my friends. I’m confident they’ll be
    benefited from this web site.
    marijuana for sale
    buy marijuana
    buy marijuana online usa
    buy marijuana online
    buy weed online usa
    buy weed online
    marijuana for sale
    order weed online
    buy cannabis online
    cannabis for sale
    weed for sale online
    weed for sale
    buy pot online
    buy cbd oil online
    kush for sale
    cbd oil for sale
    dankwoods
    dankwoods for sale

    ReplyDelete
  4. Excellent article. Keep writing such kind of information on your blog .
    Im really impressed by it.
    buy marijuana online
    You’ve performed a fantastic job. I’ll definitely
    digg it and for my part recommend to my friends. I’m confident they’ll be
    benefited from this web site.
    marijuana for sale
    buy marijuana
    buy marijuana online usa
    buy marijuana online
    buy weed online usa
    buy weed online
    marijuana for sale
    order weed online
    buy cannabis online
    cannabis for sale
    weed for sale online
    weed for sale
    buy pot online
    buy cbd oil online
    kush for sale
    cbd oil for sale
    dankwoods
    dankwoods for sale

    ReplyDelete
  5. KN95 Mask Wholesale & OEM for Prevention of COVID-19 !

    KN95 Mask Wholesaler | Manufacturer & trading company from China. 2020 latest kn95 disposable mask, spot wholesaler, selling 5-layer dust-proof air anti-virus mask n955 mask. Buy KN95 Masks for Prevention of COVID-19 today! FREE SHIPPING GLOBAL, SHIPPING IN 1-3 DAYS!

    KN95 Mask
    Mask wholesale
    Mask OEM
    Dust Mask
    5-Layer Face Mouth Mask
    Protection Safety Mask

    ReplyDelete
  6. I found so many interesting stuff in your blog especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the enjoyment here! keep up the good work…
    web design agency

    ReplyDelete
  7. This is my first time i visit here. I found so many interesting stuff in your blog especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the enjoyment here! keep up the good work. app development companies near me

    ReplyDelete
  8. Thank you for your post. This is useful information.
    Here we provide our special one's.
    Java Internships in hyderabad

    ReplyDelete
  9. Best Article buy Pain Pills online Excellent post. I appreciate this site. Stick with it! Because the admin of this web page is working.
    Best Article buy Roxicodone online Excellent post
    buy Xanax online
    buy Oxycodone online
      buy Weed online

    Best Article buy Medical Marijuana online Excellent post.This website was how do you say it? Relevant!! Finally, I’ve found something that helped me.

    buy Weed online

    buy Meltblown Nonwoven Fabric online

      buy Roxicodone 30mg online 

    buy Research Chemicals online 
    buy CBD ISOLATE online     

    ReplyDelete
  10. Body to Body massage is the best therapy to provide total relaxation to an individual. Here at our Kharar Escort, you can get hot massage therapy available at affordable prices by experienced women. We are here to fulfill our client's need and desires and if you need a hot and sexy massage therapy than it is our duty to complete their wishes.
    Follow us:-
    Kharar Escorts
    Kharar Escorts Service
    Kharar Call Girls

    ReplyDelete
  11. Escorteuro.eu is an independent service for adult entertainment, escort and massage services in Europe, at the moment we are in Denmark, Norway, Sweden and Germany in the future we will be all Europe, girls from all over the countries are represented in Escorteuro.eu, and are all independent, we only provide classified ads for these girls. Every service, escort, massage or just friendly companionship is possible within Escorteuro.eu, everybody needs a friendly companionship from time to time. In case your a tourist in Denmark, Sweden, Norway or Germany, you will find a variety of different personalities within escorteuro.eu as well as a large range of different services, you may find whatever you like. Escort, massage and companionship for everybody in Copenhagen, Ålborg, Århus, Roskilde, and other cities in Denmark. Your satisfaction is Escorteuro.eus goal. You will find every single service from kind to kinky, as well as domination.

    European dating sites
    Adult classified site in denmark
    Adult entertainment foreign girls

    ReplyDelete
  12. Hey Guys...Thanks!! for sharing this information blog. This blog are very informative.
    Detroit Real Estate Wanted

    ReplyDelete
  13. Last month, when i visited your blog i got an error on the mysql server of yours.*~,”*
    Punjab News

    ReplyDelete
  14. The presentation of the article is very good, ikinci el saat Every word written has a meaning and is very useful for the readers. ümraniye escort I hope that you can write useful articles for readers this, ikinci el saat alan yerler we also have several articles that are also interesting to read.

    ReplyDelete
  15. We take charge with 24/7 Emergency Alarm response notification you have an option with us to do it yourself or have a monitoring supervisor do it for you. we believe in providing Tailored security as per each individual client. Help is only a button press away – all our operators speak with the user directly through the Medical Alert. No landline or installation required – Product arrives ready to use. Mobile Medical Alert System enables the user to alert an Emergency wherever, whenever. Automatic Fall Detection features, incase you can't press the button. Magnetic charger and voice activation for the partially sighted and those with dexterity. Download our APP for Android & IOS – Suitable for Family members or carers. Receive instant SOS and Fall notifications wherever, whenever. Have full control over your loved one's preferences and talk directly to user through your smartphone to the Medical Alert System. Brahma Yoga Yoga 4th July Maharaja Express Fare #emergencycare #olderlycare #oldagecare #telecare #healthcare #wellness Health Wellness Old Age Care, Elderly Care

    ReplyDelete
  16. Thanks for sharing the valuable information here. So i think i got some useful information with this content. Thank you and please keep update like this informative details. url submission sites list

    ReplyDelete
  17. We give the magnificence full and experienced Dwarka Escorts Service which is good enough behavior in nature and gives you the best hearty evenings. We have all the experience and high educative great business superb Dwarka call girls partners who are keen on you to achieve your desires.

    ReplyDelete
  18. Take Enjoyments From Tongue With Hot Udaipur Escorts

    Udaipur Call girls need a young play boy for fun privately room ,Unhappy wife need very Discrete .I'm a Udaipur Escort trying to find a husband for very discreet adult fun. will give full satisfaction on my bed,this is few hours paid relationship only,all types of services consistent with your exception unconditionally with all comforts and with none disturbance
    Escorts Udaipur
    Udaipur Escorts Agency

    ReplyDelete
  19. I really appreciate for your writing. This blog is very much useful. ludo tricks

    ReplyDelete
  20. Thank you for sharing valuable information. Nice post. I enjoyed reading this post. funny usernames

    ReplyDelete
  21. Many men agree that perfect sexy female partners are not available everywhere. But you can find some of the best housewives Escorts in Jalandhar. These escorts are not only highly experienced but also very much professional. And most importantly these escorts are charging very much genuine rates. All the beguiling, arousing quality and tempting strategies utilized by these well-proportioned escorts will assist you with making an astounding inclination inside you. Escort Service in Jalandhar

    ReplyDelete
  22. We have a dream woman who will make your dreams real. Whatever your desires are, they will be fulfilled by our Noida. You can now get nicer escort services you never got before in your life.

    ____???????
    ___??????????
    ___?????????????
    ___????????????
    __?????????????
    _?????????????
    _?????????????
    _??18+ Channels????
    ??????????????????????
    ????????18+Channels ??????
    ??????????????????????????
    _??????__????????????????
    ___????____?????????????
    ___????_____??????????
    ___????_____??????????
    ____????____??????????
    _____???____?????????
    ______???__??????????
    _______??????????????
    ________??????????????
    _______???????????????????
    _______?????Noida Escorts ????
    _______?????????????????????????
    _______???????????????????????????
    ________??????????____?????????????
    _________????????_______???????????
    _________????????_____???????????
    _________???????____??????????
    _________???????_??????????
    ________???????????????
    ________????????????
    ________??????????
    _______?????????
    _______??????
    ______??????
    ______??????
    ______??????
    ______?????
    ______?????
    _______????
    _______????
    _______????
    ______??????
    _____????????
    _______|_?????
    _______|__??????

    ReplyDelete
  23. Hence, this is all about the escort booking online services for the customers and if you are thinking to find a person who is really rocking and
    pleasure-based for you then just start a new meeting with Russian Escorts in Mumbai for the hotter engagements and possibilities of sex.
    Mumbai Escorts
    Escorts in Mumbai
    Mumbai Call Girls

    ReplyDelete
  24. Get experienced girls for your erotic performance, and color your colorless nights with them.
    Escorts in rk puram

    ReplyDelete
  25. Nice post keep it up. I really like to read such a good informative blog. funny account names

    ReplyDelete
  26. In online games, a Poker table is displayed in front of you on your computer screen. The best thing is that it is so easy that you wouldn't need to ask anyone how to play poker.
    How To Play Poker
    Play Poker Online In India
    Real Money Poker
    Poker Tournaments Online In India

    ReplyDelete
  27. We take charge with 24/7 Emergency Alarm response notification you have an option with us to do it yourself or have a monitoring supervisor do it for you. we believe in providing Tailored security as per each individual client.
    Help is only a button press away – all our operators speak with the user directly through the Medical Alert. No landline or installation required – Product arrives ready to use.
    Mobile Medical Alert System enables the user to alert an Emergency wherever, whenever. Automatic Fall Detection features, in case you can't press the button. Magnetic charger and voice activation for the partially sighted and those with dexterity.
    Download our APP for Android & IOS – Suitable for Family members or carers. Receive instant SOS and Fall notifications wherever, whenever. Have full control over your loved one's preferences and talk directly to the user through your smartphone to the Medical Alert System. Telecare | Brahma Yoga | corporate wellness programs in Gurgaon.

    ReplyDelete

  28. thanks!
    Peoplebuy Methadone online because it helps them prevent the occurrence of withdrawal symptoms and treat addiction to other opioid drugs. It is generally prescribed to treat people who are addicted to heroin. And especially in the case of women who are expecting, which often causes miscarriage.


    Buy Methadone Online
    Buy Soma Online

    ReplyDelete
  29. In online games, a Poker table is displayed in front of you on your computer screen. The best thing is that it is so easy that you wouldn't need to ask anyone how to play poker.
    How To Play Poker
    Play Poker Online In India
    Real Money Poker
    Poker Tournaments Online In India

    ReplyDelete
  30. Medz Overnight Delivery, Medz Without Prescription, Get Generic Medicines Online at very cheapest price. Buy Generic Medz and get up to 50% off.

    Buy Tramadol Online
    Buy Adderall Online
    Buy Soma Online
    Buy Xanax Online
    Buy Green Xanax Online

    ReplyDelete
  31. Hey, attractive young men, are you facing issues in finding hot girls for investing quality Dehradun Escorts. Then this site brings the arrangement of your issues. Right now, share data of Dehradun Escorts agency

    ReplyDelete
  32. Rite Aid USA
    * No Prescription Required (NO RX)
    * Buy Direct and Save Time with Cryptocurrency
    * Reshipment is offered if the package does not get to location or refunds
    * High-Quality Pharmacy Grade Medicines.
    * Best and Affordable prices

    Buy Lortab Online
    Can i Buy Lortab Online
    Buy Adderall Online
    Buy Alprazolam Online
    Buy Soma Online
    Buy Xanax Online
    Buy Ambien Online
    Buy Ativan online
    Buy Carisoprodol Online
    Buy Codeine Online
    Buy Diazepam Online
    Buy Dilaudid Online
    Buy Fioricet online
    Buy Hydrocodone Online

    ReplyDelete
  33. buy sleeping tablets online
    buy zolpidem online
    buy zopiclone 7.5MG online
    buy diazepam online
    buy tramadol online uk

    Strong Sleeping Pill is a renowned and one of the most trusted online pharmacy store that assures you to provide genuine medicines at a reasonable cost.

    ReplyDelete
  34. Ambien (zolpidem) is among the most popular and effective sedatives that help people fall asleep and keep them asleep for a more extended period. Order Now -
    Buy Adderall Online
    Buy Pain Pills Online
    Buy Ambian Online
    Buy Ativan Online
    Buy Chloroquineonline Online
    Buy Codeine Online

    ReplyDelete
  35. Zolpidem is a hypnotic from the group of imidazopyridines. Ambienshortens the time of falling asleep, reduces the number of nocturnal awakenings, increases the total duration of sleep and improves its quality. Lengthens the II stage of sleep and the stage of deep sleep (III and IV). Does not cause drowsiness during the day. If you wanted to buy ambien online without prescription at the lowest price just visit our online pharmacy.

    Buy Ambien10mg
    Buy Ambien5mg
    Buy Ambien Online

    ReplyDelete
  36. This post is very simple to read and appreciate without leaving any details out. Great work! free business directory usa

    ReplyDelete
  37. Nice post thanks for sharing with us…
    Welcome to my personal blog!
    Dwarka Escorts | Escorts Service

    ReplyDelete
  38. Your Pharmacist can often change a brand-name to a Generic drug to save you money. They may do this automatically, or they may call your doctor for you and get an updated Rx. If your doctor prescribes you a name-brand drug that you're struggling to afford, ask your pharmacist for a Generic version.

    Buy Adderall Online

    Buy Alprazolam Online

    Buy Ambien Online

    Buy Ativan Online

    Buy Valium Online

    Buy Vicodin Online

    Buy Xanax Online

    ReplyDelete
  39. This can be led to Gurgaon escorts service which we neighbourhood unit pleased to present the very best, sexy and many magnificent forms accessible in Gurgaon and neighbourhood city. With federal states you will find the easiest Gurgaon escort services and the individual will be ready to excite your senses to intense amounts to provide you the previous work pleasure.
    mg road escorts
    sikanderpur escorts
    alwar escorts
    bhiwadi escorts
    rewari escorts

    ReplyDelete
  40. If you're looking for the teenager escorts in Gurgaon town afterward you're at the ideal destination! I'm busty and young and you're able to live my energies into the full and possess the deepest joy and the best satisfaction through your perceptions.
    dlf golf course escorts
    hudda city center escorts
    sushant lok escorts
    neemrana escorts
    bilaspur escorts
    mahipalpur escorts

    ReplyDelete
  41. To get Gurgaon escorts to see them in resort or some other pre suggested comfy location. Heartiest welcome from Gurgaon escorts agency. gurgaon dolls is high-profile escorts service of india. We're supplying Gurgaon escorts service past couple of decades. Each month we employ new Gurgaon models so that customer should have a lot of option for pick them.
    Gurgaon escorts
    manesar escorts
    surajkund escorts
    iffco chowk escorts
    palam vihar escorts
    rajiv chowk escorts
    sohna road escorts

    ReplyDelete
  42. Indeed, even a couple of years back, Indian men, searching for the Hauz Khas Escorts, needed to confront bunches of issues and brothers in tracking down a commendable call young lady. As a matter of first importance, it would definitely take a man adequate of time and exertion to find the Independent Escorts Hauz Khas. Hence, the administrations by these young ladies were accessible in and around the large urban communities as it were.

    Escorts Service in Hauz Khas

    ReplyDelete
  43. Nice post. It is really interesting.
    Welcome the best Escorts Service.
    Pleases visit our website…
    Mayur Vihar Escorts.

    ReplyDelete
  44. Welcome To Jodhpur Escorts, which is based on adult service, featuring high-profile, college girls in Jodhpur Young Girls. Jodhpur offers you unlimited fun pleasure through Independent Escorts in Jodhpur. Get ready to feel and take this pleasurable movement in just a minute.

    ReplyDelete
  45. It is not necessary that your wife is always brilliant in sensuous moments. Does this mean you have to remain dissatisfied throughout your life? Not necessary. You have the service of Agra Escorts. Apart from cheating any normal girl, take the support of our escorts. Well, it is impossible to survive without erotic love. If you are interested please call me and visit our website for more information.

    ReplyDelete
  46. Our professional Delhi Escorts Girls are the best choice of every man how he is a girl lover as they are high profile as well as the most beautiful escorts, so they always want to spend the whole night with a decent man who is having fun- Also provides him so much satisfaction. They will offer a welcome change to the Individuals Difficult Lives program. For more information visit our website.
    click here : Delhi Call Girls

    ReplyDelete
  47. All people's desire that if I reserve escorts over and over then each time, I need to get something fresh in same service so we want we always work to know client’s feelings and should finish them fantasies. Entire your aims to hire escorts in Goa. if you're in Goa for business function and are searching for Goa escorts service, you've arrived at the true location.
    Goa escorts
    Goa escort service
    Goa call girls
    escorts in Goa
    Goa female escorts
    Goa russian escorts

    ReplyDelete
  48. People searching for amusement should consult a great agency to provide best service in a brief moment. There are many agencies providing the support but a number aren't supplying the top-notch support demand by the consumers. Goa escorts services is the ideal service to deliver your preferred partner in a brief while at the hotel area.
    escort service in Goa
    calangute escorts
    candolim escorts
    panaji escorts
    baga escorts
    morjim escorts
    anjuna escorts

    ReplyDelete
  49. We will be delighted to supply you with some more details and statistics and information you need to desire as vanity standing, languages etc. Be at liberty to contact united countries and permit us to apprehend the escort services in Goa that you need in alignment we can provide together with the easiest woman.
    porvorim escorts
    arpora escorts
    vagator escorts
    arambol escorts
    dona paula escorts
    miramar escorts

    ReplyDelete
  50. Thank you for sharing valuable information. Nice post. I enjoyed reading this post.
    free forum sites

    ReplyDelete