Lab: Web cache poisoning via a fat GET request

In-depth solution to PortSwigger's "Web cache poisoning via a fat GET request" lab.

👀 Check out playlist Web Cache Poisoning for all my solutions to the Web Cache Poisoning labs from PortSwigger.

Try it yourself:
https://portswigger.net/web-security/...

Timestamps:
00:00 - Intro
00:29 - Identify a cache oracle
01:05 - Add a cache buster
03:17 - Identify simple XSS
03:56 - Identify parameter pollution
04:43 - Find unkeyed input
05:24 - How Parameter Cloaking would work?
06:55 - Parameter pollution with a fat GET request

Parameter Cloaking lab:
Lab: Web Cache Poisoning with Paramet...

• #science_technology
• #web_cache_poisoning_fat_get_request
• #web_cache_poisoning
• #fat_get_request
• #portswigger_lab
• #web_security_academy