hunt-cache-poison

Automate cache poisoning detection by running a command-line scan against the target URL. This Skill identifies unkeyed headers, path normalization issues, and cache control flaws to systematically find cache poisoning opportunities.

Web cache deception tricks caches into storing sensitive user data, while CDN poisoning injects malicious content into shared cache entries. This Skill automates detection for both attack types by analyzing cache control issues and unkeyed headers.

Yes, you can scan a specific domain by executing the command with the target URL. The Skill uses requests, tldextract, and BeautifulSoup to analyze web cache behavior and identify unkeyed header vulnerabilities automatically.

Unkeyed headers are request headers excluded from the cache key, allowing attackers to alter cached responses without changing the cache identifier. This Skill identifies these headers to expose cache poisoning opportunities in web applications.

Yes, you need the requests, tldextract, and BeautifulSoup Python libraries installed. These dependencies enable the Skill to fetch web content, parse target domains, and analyze HTML for cache control issues.

Automated vulnerability detection for web caches may miss complex logic flaws or fail on heavily obfuscated applications. The Skill provides systematic guidance and technical command-line examples but requires manual verification of path normalization and cache control issues.