hunt-cache-poison

You detect cache poisoning by analyzing CDN headers and testing unkeyed input reflection to validate if malicious responses can be stored globally for all users. This skill automates that multi-step manual testing process across various CDN configurations.

Web Cache Deception tricks caching layers into storing authenticated user data by manipulating URL path normalization. This skill validates these vulnerabilities specifically in multi-tenant SaaS environments by testing path manipulation against caching rules.

Testing unkeyed header reflection involves mapping cache key components like X-Cache headers and injecting unkeyed inputs to verify if they are cached globally. This skill automates the infrastructure mapping and structured testing methodology for security assessments.

Yes, this skill is designed for auditing CDN-fronted e-commerce platforms and provides a structured methodology to test for DoS via cache poisoning. It confirms impact on global cache entries by validating poisoned redirects or stored malicious responses.

The best way to find unkeyed inputs causing poisoned redirects is to systematically test unkeyed headers and URL path normalization against the target domain. This skill identifies caching layers and validates if those inputs are reflected in globally stored responses.