@tekk to avoid write caching, the attacker can hit random urls on the web server. Should work as long as it's serving actual files from disk. May need to make strategic use of subdirectories to avoid VFS caching. Or, just make the period be hours, not minutes, so caches go stale.

I also wonder about attacks involving DMA...