[JayW5321]

Can anyone help me with a hint?

check bot_runner. make bot request a page and cache it.

[akared666]

I know the principle is a Cache spoofing attack, but I'm having a bit of trouble making a cache using /visit, there's no way to make one correctly. My payload is being returned with a 400 status code. Can anyone give a little hint on this?

[akared666]

I know the principle is a Cache spoofing attack, but I'm having a bit of trouble making a cache using /visit, there's no way to make one correctly. My payload is being returned with a 400 status code. Can anyone give a little hint on this?

Well, I've got the flag, if you encounter the same 400 status code as me just need to modify your http header, if the error is “invalid token” then send a few more requests on the line, the reason is not clear!