Leaking secrets through caching with Bunny CDN
Target Program: bunny.net
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
More Writeups Like This
pentester.land
by Martin Doyhenard (@tincho_508)Gotta cache 'em all: bending the rules of web cache exploitation
pentester.land
by Gareth Heyes (@garethheyes)Splitting the email atom: exploiting parsers to bypass access controls
pentester.land
by Bahruz Jabiyev (@BahruzJabiyev), Anthony Gavazzi, Kaan Onarlioglu, Engin KirdaGudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
pentester.land
by Abhijith Namboothiry