Burp Suite User Forum

Create new post

Web Cache Poisoning with an Unkeyed Header

john | Last updated: Jul 17, 2024 04:27PM UTC

I solved the "Web Cache Poisoning with an Unkeyed Header" lab using the Exploit server provided in the lab. However, when I try to solve it a second time with my own exploit server that I set up with Ngrok and Python, it doesn't work. I don't understand what's happening. Could the problem be with the lab? Thank you.

Ben, PortSwigger Agent | Last updated: Jul 18, 2024 07:46AM UTC

Hi John, The lab environment will block interactions that come from external systems in order to prevent our platform from being used to attack third parties. You would need to use the exploit server rather than rely on alternative means to deliver exploits, I am afraid.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.