{"published":"2025-09-22 14:15:47","provider_url":"https://hatena.blog","width":"100%","categories":["Web Security Academy","Web Cache"],"title":"Lab: Exploiting origin server normalization for web cache deception \u2014 \u89e3\u8aac\u3068\u624b\u9806","author_url":"https://blog.hatena.ne.jp/ThisIsOne/","blog_url":"https://cysec148.hatenablog.com/","provider_name":"Hatena Blog","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fcysec148.hatenablog.com%2Fentry%2F2025%2F09%2F22%2F141547\" title=\"Lab: Exploiting origin server normalization for web cache deception \u2014 \u89e3\u8aac\u3068\u624b\u9806 - Shikata Ga Nai\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","type":"rich","blog_title":"Shikata Ga Nai","version":"1.0","image_url":null,"height":"190","url":"https://cysec148.hatenablog.com/entry/2025/09/22/141547","author_name":"ThisIsOne","description":"Hello there, ('\u03c9')\u30ce \u52d5\u753b youtu.be 1. \u30bf\u30a4\u30c8\u30eb Lab: Exploiting origin server normalization for web cache deception \u2014 \u30aa\u30ea\u30b8\u30f3\u30b5\u30fc\u30d0\u306e\u6b63\u898f\u5316\uff08Normalization\uff09\u3092\u7a81\u3044\u3066 API \u30ad\u30fc\u3092\u53d6\u5f97 2. \u6ce8\u610f\u66f8\u304d \u91cd\u8981\uff1a\u672c\u8a18\u4e8b\u306f\u5b66\u7fd2\u76ee\u7684\u306e\u307f\u3002\u30e9\u30dc\u4ee5\u5916\u3067\u306e\u5b9f\u65bd\u306f\u7981\u6b62\u3002 3. \u6982\u8981 \u3053\u306e\u30e9\u30dc\u306f\u3001\u30aa\u30ea\u30b8\u30f3\u30b5\u30fc\u30d0\u304c URL \u30d1\u30b9\u306e \u30c9\u30c3\u30c8\u30bb\u30b0\u30e1\u30f3\u30c8\uff08/./, /../\uff09\u3084\u30a8\u30f3\u30b3\u30fc\u30c9\uff08%2f \u306a\u3069\uff09 \u3092 \u30c7\u30b3\u30fc\u30c9\u30fb\u89e3\u6c7a\u3057\u3066\u6b63\u898f\u5316\u3059\u308b\u4e00\u65b9\u3001\u30ad\u30e3\u30c3\u30b7\u30e5\u5c64\uff08CDN/\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\uff09\u304c\u305d\u308c\u3092 \u540c\u3058\u3088\u3046\u306b\u89e3\u91c8\u2026"}