Back to directory
WRITEUP #2137

Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned)

OtherWeb cache poisoning
by@_medusa_1_(Francesco Mariani)
Bounty
50,000
Program
AkamaiPaypalAirbnbTeslaValveZomatoWhitejarStarbucksPlayStationMarriottHyatt HotelsGoldman SachsMicrosoftAppleLastPassBrussels AirlinesMastercardeToro BBPBMW GroupRockstar Games
Published
Sep 29, 2022
Added to HackDex
Oct 2, 2022
Read Full Writeuphttps://medium.com/@jacopotediosi/worldwide-server-side-cache-poisoning-on-all-akamai-edge-nodes-50k-bounty-earned-f97d80f3922b
▸ RELATED WRITEUPS
Gotta cache 'em all: bending the rules of web cache exploitation
OtherWeb cache poisoning
Splitting the email atom: exploiting parsers to bypass access controls
OtherWeb cache poisoning
Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
OtherWeb cache poisoning
Data Theft in Salesforce: Manipulating Public Links
OtherSOQL injection
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Other2FA / MFA bypass

Built with ❤️ by Shubham Rawat