Edge Side Include Injection: Abusing Caching Servers into SSRF and Transparent Session Hijacking
Industry experts analyze emerging threats surrounding Edge Side Include Injection: Abusing Caching Servers into SSRF and Transparent Session Hijacking.
Summary
ESI injection abusing caching servers for SSRF and session hijacking.
Related talks
Black Hat·32 min
Eyal Karni · Sagi Sheinfeld · Yaron Zinar
Engineers explore architecture and security mechanisms for Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks.
active-directoryinjection-attacksinjection+1
Black Hat·36 min
Qi Deng · Bo Qu · Tao Yan
Security researchers examine technical aspects of Give Me a SQL Injection, I Shall PWN IIS and SQL Server.
sql-injectioninjectionshall+1
Black Hat·25 min
Industry experts analyze emerging threats surrounding Jack-in-the-Cache: A New Code injection Technique through Modifying X86-to-ARM Translation Cache.
injectioncode-injectionjack-in-the-cache+2