Web Cache Deception Attack

Explore the Web Cache Deception attack, a novel web attack vector threatening various technologies and frameworks, in this 23-minute Black Hat conference talk by Omer Gil. Learn how attackers can manipulate web servers and caching mechanisms to expose sensitive information of authenticated users and potentially gain control over their accounts. Delve into caching basics, server reactions, attack conditions, and mitigation strategies. Gain valuable insights into this critical security vulnerability and understand its implications for web application security.

Intro
About caching
Servers' reactions
Getting down to business
Conditions
Why the HELL #2
Mitigation