The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

When this occurs, and you need to intercept and modify the resource that

the browser has cached, you can intercept the relevant request and remove the

If-Modified-Since

and 

If-None-Match

headers, causing the server to

respond with the full version of the requested resource. Burp Proxy contains an

option to strip these headers from every request, thereby overriding all cache

information sent by the browser.

Chapter 5 

■

Bypassing Client-Side Controls

107

70779c05.qxd:WileyRed  9/16/07  5:14 PM  Page 107

---

HACK STEPS

■

Look for form elements containing a 

maxlength

attribute. Submit data

that is longer than this length but that is validly formatted in other