Rachid Allam
Author
Rachid Allam
External security researcher Rachid Allam (zhero)
Exploiting web cache poisoning vulnerabilities
Web & API Hacking
Security Misconfigurations
Hacking Tools
June 24, 2026
Web (or HTTP) caching is a highly adopted practice to effectively optimize web page loading times for clients. However, as with most technologies, when incorrectly implemented, it may open up a new exploitable attack surface for us to look into. In this article, we'll cover what web cache poisoning
