[ home ]/web-cache-deception
Intermediate4 weeks

Web Cache Deception

A focused dive into one of the web's most overlooked risk areas: the caching layer. Learn how CDNs, reverse proxies, and origin servers can interpret requests differently, why that matters, and how to test for and remediate the resulting issues in your own systems.

Web Architecture

[ modules ]

  1. 01HTTP/1.1 vs HTTP/2 parsing differentials
  2. 02Cache key construction and gadget discovery
  3. 03CL.TE and TE.CL desync chains
  4. 04Cache deception against authenticated endpoints

[ outcomes ]

  • >Identify desync primitives in production stacks
  • >Build cache-poisoning proofs of concept safely
  • >Write remediation guidance for engineering teams

[ related_modules ]