Gotta Cache Em All: Bending the rules of web cache exploitation

Welcome to the repo. This repository contains all the materials for my talk "Gotta Cache Em All: Bending the rules of web cache exploitation".

You can read about this research at:

https://portswigger.net/research/gotta-cache-em-all

CacheKiller contains a tool to discover URL parsing discrepancies and the different arbitrary cache poisoning and deception described in my BlackHat and DEF CON talk.

We've created a Web Security Academy topic to learn the web cache deception attacks and to try out your new skills.