The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: Exploiting exact-match cache rules for web cache deception

totkogonet | Last updated: Aug 20, 2024 05:21AM UTC

Hi all! Tell me, only in my “Lab: Exploiting exact-match cache rules for web cache deception” when sending an exploit to a victim, she does not switch to it. That is, the logs do not show that he is accessing it, and accordingly does not send his page to the cache. I tried through a script with document.location and through a redirect using the Location header. I used Burp CE and the built-in browser. Help please.

totkogonet | Last updated: Aug 20, 2024 06:41AM UTC

As usually happens after writing a ticket, everything worked))

Dominyque, PortSwigger Agent | Last updated: Aug 20, 2024 09:32AM UTC

Hi totkogonet Glad you were able to solve the lab! :)

Genry | Last updated: Sep 04, 2024 08:07PM UTC

hi, I have the same problem, after press button "Deliver exploit to victim", nothing happen, in access log empty

Genry | Last updated: Sep 04, 2024 08:13PM UTC

After writing this message it begin works. I tried solve lab about 30-40 minutes with renew lab instance and access log were empty in both cases

Ben, PortSwigger Agent | Last updated: Sep 05, 2024 06:36AM UTC