skills.rest
Acczdy
AcczdyCOMMUNITY
Explore all skills by this author →
GitHub

performing-web-cache-deception-attack

Test authenticated endpoints for improper CDN caching of personalized content.

2|Updated Apr 14, 2026
Search Tags:#cdn#web-security#security-testing#web-cache-deception#cache-deception#authenticated-content
One-click install
npx skills add https://github.com/Acczdy/MoZiSec --skill performing-web-cache-deception-attack
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-web-cache-deception-attack
Source: https://github.com/Acczdy/MoZiSec/tree/main/web-security/.claude/skills/performing-web-cache-deception-attack
Command: npx skills add https://github.com/Acczdy/MoZiSec --skill performing-web-cache-deception-attack

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security engineers identify and assess web cache deception vulnerabilities by testing authenticated endpoints to determine if CDNs cache and serve personalized content to unauthenticated users.

Core Features & Use Cases

  • Detects authenticated-page caching by manipulating URL extensions and request headers to reveal misconfigurations.
  • Analyzes CDN and origin caching behavior using header inspection (X-Cache, CF-Cache-Status, Age) and content checks for PII exposure.
  • Suitable for assessments of applications behind CDNs (Cloudflare, Akamai, Varnish) and reverse proxies to prevent data leakage.

Quick Start

Run the web cache deception attack test against a target URL with an authenticated session to verify whether the CDN caches personalized responses and document any exposure.

Frequently Asked Questions about performing-web-cache-deception-attack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does web cache deception expose authenticated content through a CDN?▼

Web cache deception exploits CDN misconfigurations by manipulating URL extensions to cache authenticated pages, serving personalized data to unauthenticated users. This Skill tests endpoints to identify and assess such vulnerabilities.

How do I test for web cache deception vulnerabilities on authenticated endpoints?▼

Test web cache deception by running this Skill with an authenticated session against a target URL. It manipulates request headers and URL extensions to verify whether the CDN improperly caches personalized responses.

Does this web cache deception test work with Cloudflare, Akamai, and Varnish?▼

Yes, this Skill assesses applications behind CDNs like Cloudflare, Akamai, and Varnish. It inspects cache headers including X-Cache, CF-Cache-Status, and Age to analyze caching behavior across these diverse environments.

Can I use Python requests to automate web cache deception checks?▼

Yes, this Skill uses Python-based requests to automate web cache deception checks. It inspects response headers and content consistency to detect potential PII exposure without requiring manual testing.

What is the best way to detect CDN caching misconfigurations for personalized content?▼

The best way to detect CDN caching misconfigurations is by analyzing cache headers and response consistency between authenticated and unauthenticated requests. This Skill automates that inspection to reveal improper caching of personalized content.

Why does the CDN cache authenticated pages and serve them to unauthenticated users?▼

A CDN caches authenticated pages when misconfigurations treat manipulated URL paths as static assets. This Skill identifies these misconfigurations by checking if personalized responses are cached and served across different sessions.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

vuln-cache-deception

Validate web cache deception vulnerabilities in CDN and reverse proxy configurations.

Community
Advanced
cybersecwomancybersecwoman
5

hunt-cache-poison

Analyze public bug bounty reports to identify cache poisoning attack vectors.

Community
Advanced
EntroVyxEntroVyx
3

cache-attack

Detect CDN providers and test web cache poisoning and deception vulnerabilities.

Community
Advanced
dreadnodedreadnode
11

web-cache-deception-path

Detect web cache deception vulnerabilities from inconsistent URL path parsing.

Official
Intermediate