$10k+5k Web cache poisoning - Github + Firefox - Bug Bounty Reports Explained

📧 Subscribe to BBRE Premium: bbre.dev/premium
✉️ Sign up for the mailing list: bbre.dev/nl
📣 Follow me on Twitter: bbre.dev/tw
Today's video is about Web Cache Poisoning attacks found during the yearly research by James Kettle aka albinowax. The bug bounty reports explained in the video come from Github and Mozilla bug bounty programs.
Follow me on twitter:
/ gregxsunday
Video:
• Web Cache Entanglement...
Article:
portswigger.net/research/web-...
Whitepaper:
portswigger.net/kb/papers/c3w...
James' twitter:
/ albinowax
Timestamps:
00:00 Intro
00:27 What is cache?
02:47 basics of cache poisoning
03:54 Github cache poisoning
05:21 Firefox cache poisoning
#cachepoisoning #bugbounty

[@BugBountyReportsExplained]

Welcome to the comment section!
First, thanks for watching!
Make sure you are subscribed if you liked the video!
czcams.com/users/BugBountyReportsExplained
Follow me on twitter:
twitter.com/gregxsunday
✉️ Sign up for the mailing list ✉️
mailing.bugbountyexplained.com/
☕️ Support my channel ☕️
www.buymeacoffee.com/bountyexplained
🖥 Get $100 in credits for Digital Ocean 🖥
m.do.co/c/cc700f81d215

[@yashmehta9816]

Great video! I love the clear explanation and methodical presentation.

[@BugBountyReportsExplained]

thanks! I happy you like it

[@sysrootsysroot2743]

hii

[@attitalks]

This is my favourite CZcams channel now

[@krishanuchhabra]

Awesome work bro !!

[@sysrootsysroot2743]

rply

[@danieltamang2289]

Thanks man! I got one whose explanation actually comes into my mind

[@BugBountyReportsExplained]

Great to hear that Daniel!

[@debprasadbanerjee5005]

5:07 Is it like Desync attack? Cause the victim is being served our request end of the day?

[@internetandcomputerprobe4426]

really informative

[@TheThunderSpirit]

good content. 👍👍

[@BugBountyReportsExplained]

😊

[@AnPham-uz3td]

At 4:13 I think the body of form-urlencode should be: key=value2 in order to overwrite the key on GET request for poisoning, am i right?

[@BugBountyReportsExplained]

Well, this was a generic example just to explain what fat GET is, but if we go one step further and try to exploit web cache poisoning, indeed we need to overwrite the parameter key.

[@jaywandery9269]

brother, in the 6:03 min the entry in the 3rd row, is that equivalence correct? I mean why did you disregard the b?

[@BugBountyReportsExplained]

Yes, it's correct.
../ is like coming one directory back

[@jaywandery9269]

@@BugBountyReportsExplainedthanks for explaining

[@apnadekhtu]

nice content but i don't understand all of this, i am interested in ethical hacking and bug bounty program where do i have to start? is there any good content on CZcams? please suggest me way.. one question do i need to know the programming for hacking?

[@BugBountyReportsExplained]

you do not need to know programming, but it's useful. For learning, go to OWASP materials and WebSec Academy

[@gf384]

Thanks!

[@BugBountyReportsExplained]

thanks for watching!

[@simonkoeck]

i think you misspelled referer :D

[@BugBountyReportsExplained]

haha right, I forgot to include this mistake 😂

[@geri_revay]

Referrer is the correct spelling and it was misspelled in the RFC as referer: www.reddit.com/r/ProgrammerHumor/comments/6hbpyl/http_header_referer_was_misspelled_in_the_1996/

[@ca7986]

❤️

[@BugBountyReportsExplained]

😊

[@hdphoenix29]

damet garm n1

[@BugBountyReportsExplained]

👌

[@blueman1592]

i was great but i couldn't understand anyway

[@BugBountyReportsExplained]

which part you dont understand?

[@salih4078]

👍

[@BugBountyReportsExplained]

👌

[@sysrootsysroot2743]

hii

[@abrakadabra0072]

It's 404 Like :)

[@BugBountyReportsExplained]

where is it? can't find... badum tss

[@sysrootsysroot2743]

hii

[@medhamid8003]

First Comment

[@BugBountyReportsExplained]

first response