Repository navigation

web_cache_deception

Public

About

Dockerized lab reproducing a Web Cache Deception vulnerability (Node.js app behind an nginx cache)

docker nginx nodejs web-cache-deception web-security

0 stars

1 watching

Report repository

Name		Name	Last commit message	Last commit date
images		images
nginx		nginx
node_modules		node_modules
public/css		public/css
views		views
.dockerignore		.dockerignore
Dockerfile		Dockerfile
README.md		README.md
docker-compose.yml		docker-compose.yml
index.js		index.js
package-lock.json		package-lock.json
package.json		package.json

Repository files navigation

Replication of web_cache_deception

Login using username- admin and password -admin

/private is vulnerable path.This path can only be accessed after correct authentication.

static path added to /private gets catched by the server like /private/test.css

/private/test.css can then be accessed without authentication.

About

Dockerized lab reproducing a Web Cache Deception vulnerability (Node.js app behind an nginx cache)

docker nginx nodejs web-cache-deception web-security

0 stars

1 watching

Report repository

Releases

Packages

Contributors

Languages