## Difficulty TODO (needs to be tested) ## Category Web ## How To Solve After visiting the website, you can see the website has 2 posts: `The flag` and `Updates to my website`. The flag page states that the page will be updated with the actual flag soon. The other page says that a cache has recently been added to the website to decrease server load, but it might be misconfigured. Every contains a "Generated at" page, indicating when the server has generated the page you're viewing. For the home page, this date is updated each time you refresh the page, but for the posts, it isn't. The point of this challenge is to bypass the cache, and get the most recent version of the "flag" page. It could be there are multiple ways to bypass the cache, but the recommended solution is to add a random query paramater to the apge. For example: `example.com/my-post` might be in the cache, but `example.com/my-post?a=1` might not be. So to get the flag, all you need to do is go to `/posts/my-flag?a=1`. ## Flag `IGCTF{how-do-caches-work?}`