Detect and exploit web cache poisoning and deception vulnerabilities in CDNs and reverse proxies.
npx skills add https://github.com/uphiago/recon-skills --skill cache-attack
Please help me install this Agent Skill. Skill: cache-attack Source: https://github.com/uphiago/recon-skills/tree/main/recon/cache-attack Command: npx skills add https://github.com/uphiago/recon-skills --skill cache-attack
This Skill solves the problem of identifying and exploiting web cache poisoning (WCP) and web cache deception (WCD) vulnerabilities in CDNs and reverse proxies, which are often undetected during standard surface-level web reconnaissance and vulnerability scanning.
Use the cache-attack skill to test the target example.com for web cache poisoning and deception vulnerabilities, starting with automated cache header detection and CDN identification.
High-intent search queries and answers about installing and using this skill.
To test for web cache poisoning on Cloudflare or Fastly, you need to check for unkeyed input reflection and validate if the caching system stores malicious payloads. This Skill automates that detection using standard command-line tools like curl.
The best way to detect web cache deception flaws is to force the caching system to store sensitive user pages, such as admin dashboards or profiles, and then attempt to access them. This Skill validates those cache deception vulnerabilities directly.
Cache poisoning works by exploiting infrastructure-layer attack vectors in reverse proxies that standard application scans miss. This Skill identifies unkeyed inputs and validates cache storage to enable stored cross-site scripting or open redirects via poisoned caches.
Yes, you can use curl and nmap to identify CDN and reverse proxy providers like CloudFront, Varnish, or Nginx. This Skill automates cache infrastructure detection by analyzing specific cache response headers from those command-line tools.
You should pivot to testing reverse proxy cache vulnerabilities when standard surface-level web reconnaissance finds no direct application flaws. This Skill enables you to expand the attack surface to infrastructure-layer vectors against targets using caching layers.
Yes, this Skill supports testing for open redirect attacks on Nginx by validating cache storage of malicious payloads. It tests unkeyed input reflection to enable both stored cross-site scripting and open redirect attacks through poisoned cache entries.
transilienceaiCoordinate subdomain discovery and port scanning to build a domain attack surface inventory.
Ed1s0nZTest web applications for reflected, stored, and DOM-based XSS vulnerabilities.
EntroVyxIdentify and validate cache poisoning and Web Cache Deception vulnerabilities via CDN headers.
EntroVyxDetect CDN providers and test web cache poisoning and deception vulnerabilities.
