Web Security Academy | Web Cache Poisoning | 4 - Targeted Web Cache Poisoning Using Unknown Header

preview_player
Показать описание
We solve a Web Cache Poisoning lab in PortSwigger's Web Security Academy Labs.
Рекомендации по теме
Комментарии
Автор

Also I don't get what's the significance of targeting tracking.js...is it because it is a js file? I'm not unsafe handling of resource imports!!!

pranjalruhela
Автор

If a header (xhost in this case) is supported by the root of a website ie the homepage will it be supported throughout the website... why to test the home page rather than the comments section by the param miner?

pranjalruhela