Rachid Allam

Author

Rachid Allam

External security researcher Rachid Allam (zhero)

Exploiting web cache poisoning vulnerabilities

Web & API Hacking
Security Misconfigurations

Hacking Tools

June 24, 2026

Web (or HTTP) caching is a highly adopted practice to effectively optimize web page loading times for clients. However, as with most technologies, when incorrectly implemented, it may open up a new exploitable attack surface for us to look into. In this article, we'll cover what web cache poisoning

Continue reading: Exploiting web cache poisoning vulnerabilities