Skip to content
Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts
samcurry.net | blog | #bug-bounty | #account-takeover | #web-security | #cache-poisoning | #rocket-league | #path-normalization
Summary
Chasing Rocket League's white-hat reward, Sam Curry chained HTTP path normalization quirks and cache poisoning into account theft—a walkthrough of finding bugs in a seemingly boring web target.
- Published
- Collected