Web Cache Attacks (Poisoning / Deception)

Recursos cross-platform para Web Cache Attacks (Poisoning / Deception): máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

Esta página agrega los recursos para practicar Web Cache Attacks (Poisoning / Deception) de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

Cobertura: 22 retos en 2 plataformas — 21 PortSwigger · 1 TryHackMe. 0 con writeup en español, 0 con writeup en vídeo.

​

Por dónde empezar

Ordenado por dificultad real. A igual nivel, primero el lab aislado, después la room guiada y por último la máquina completa.

1. PortSwigger — Cache key injection (Apprentice) · 🇬🇧
2. PortSwigger — Combining web cache poisoning vulnerabilities (Apprentice) · 🇬🇧
3. PortSwigger — Exploiting exact-match cache rules for web cache deception (Apprentice) · 🇬🇧
4. PortSwigger — Exploiting HTTP request smuggling to perform web cache deception (Apprentice) · 🇬🇧
5. PortSwigger — Exploiting HTTP request smuggling to perform web cache poisoning (Apprentice) · 🇬🇧
6. PortSwigger — Exploiting path mapping for web cache deception (Apprentice) · 🇬🇧

​

Recursos curados

Fuente	Enlace
PortSwigger	https://portswigger.net/web-security/web-cache-deception

​

Labs PortSwigger que practican Web Cache Attacks (Poisoning / Deception) (21)

Lab	Dificultad	Topic	Oficial
Cache key injection	APPRENTICE	Web Cache Poisoning	Abrir
Combining web cache poisoning vulnerabilities	APPRENTICE	Web Cache Poisoning	Abrir
Exploiting exact-match cache rules for web cache deception	APPRENTICE	Web Cache Deception	Abrir
Exploiting HTTP request smuggling to perform web cache deception	APPRENTICE	HTTP Request Smuggling	Abrir
Exploiting HTTP request smuggling to perform web cache poisoning	APPRENTICE	HTTP Request Smuggling	Abrir
Exploiting path mapping for web cache deception	APPRENTICE	Web Cache Deception	Abrir
Internal cache poisoning	APPRENTICE	Web Cache Poisoning	Abrir
Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria	APPRENTICE	Web Cache Poisoning	Abrir
Exploiting cache server normalization for web cache deception	PRACTITIONER	Web Cache Deception	Abrir
Exploiting origin server normalization for web cache deception	PRACTITIONER	Web Cache Deception	Abrir
Exploiting path delimiters for web cache deception	PRACTITIONER	Web Cache Deception	Abrir
Parameter cloaking	PRACTITIONER	Web Cache Poisoning	Abrir
Targeted web cache poisoning using an unknown header	PRACTITIONER	Web Cache Poisoning	Abrir
URL normalization	PRACTITIONER	Web Cache Poisoning	Abrir
Web cache poisoning via a fat GET request	PRACTITIONER	Web Cache Poisoning	Abrir
Web cache poisoning via ambiguous requests	PRACTITIONER	HTTP Host Header Attacks	Abrir
Web cache poisoning via an unkeyed query parameter	PRACTITIONER	Web Cache Poisoning	Abrir
Web cache poisoning via an unkeyed query string	PRACTITIONER	Web Cache Poisoning	Abrir
Web cache poisoning with an unkeyed cookie	PRACTITIONER	Web Cache Poisoning	Abrir
Web cache poisoning with an unkeyed header	PRACTITIONER	Web Cache Poisoning	Abrir
Web cache poisoning with multiple headers	PRACTITIONER	Web Cache Poisoning	Abrir

​

Rooms TryHackMe que practican Web Cache Attacks (Poisoning / Deception) (1)

Room	Dificultad	Tipo	Acceso	Oficial
L2 MAC Flooding & ARP Spoofing	EASY	Walkthrough	🟢 Free	Abrir

---

← Volver al glosario completo

Última actualización: 2026-08-13