Gotta cache 'em all: bending the rules of web cache exploitation

Published

2026-01-08 12:21

Collected

2026-07-22 04:46

---
id: 5054
title: "Gotta cache 'em all: bending the rules of web cache exploitation"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/gotta-cache-em-all"
published_at: "2026-01-08 12:21"
tags: ["vulnerability-research", "web-security", "research", "cdn", "url-parsing", "cache-poisoning", "parser-discrepancies", "web-cache"]
phying_url: "https://phying.com/item/5054"
lang: en
---

# Gotta cache 'em all: bending the rules of web cache exploitation

## Summary

Doyhenard's research exploits URL parser discrepancies and RFC ambiguities between CDNs and origins — delimiters, normalization, static extensions — achieving arbitrary cache poisoning and deception.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2026-01-08 12:21
- **Original:** https://portswigger.net/research/gotta-cache-em-all
- **Phying News:** https://phying.com/item/5054