skills.rest
Prohao42
Prohao42COMMUNITY
Explore all skills by this author →
GitHub

web-cache-deception

Identify web cache deception and poisoning vulnerabilities in CDN configurations.

120|8|Updated Jun 2, 2026
Search Tags:#cdn#web-security#security-testing#web-cache#cache-poisoning#cache-deception
One-click install
npx skills add https://github.com/Prohao42/aimy-sikll --skill web-cache-deception-prohao42
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web-cache-deception
Source: https://github.com/Prohao42/aimy-sikll/tree/main/ai-mian/hack-skills/skills/web-cache-deception
Command: npx skills add https://github.com/Prohao42/aimy-sikll --skill web-cache-deception-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web cache deception and poisoning present serious risks where authenticated content can be exposed or misrepresented due to improper caching. This playbook guides security professionals to identify, simulate, and mitigate these vulnerabilities in CDN, reverse proxy, and origin configurations.

Core Features & Use Cases

  • Distinguishes between web cache deception (stealing data) and web cache poisoning (serving malicious content) across CDN and proxies.
  • Provides methodology to test cache-key handling, unkeyed inputs (headers, parameters), and path normalization differences that enable attacks.
  • Covers CDN-specific behaviors (Cloudflare, CloudFront, Akamai, Varnish, Fastly) and guidance for safe, responsible testing.

Quick Start

Execute a controlled assessment by loading the playbook alongside the reference techniques to map cache-key behavior on your test domain.

Frequently Asked Questions about web-cache-deception

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for web cache deception and poisoning on my CDN?▼

Web cache deception and poisoning differ in impact: deception steals authenticated content through path normalization issues, while poisoning serves malicious content by exploiting unkeyed inputs like headers and parameters in cache configurations.

Can I use this methodology to test Varnish and Fastly cache configurations?▼

Yes, this methodology applies to testing Varnish and Fastly cache configurations, alongside Cloudflare, CloudFront, and Akamai, to evaluate cache key behavior, Vary header implications, and authenticated content exposure risks.

What is the difference between web cache deception and web cache poisoning?▼

Web cache deception exposes authenticated content by exploiting path normalization differences to trick caches into storing private data, whereas web cache poisoning serves malicious content to users by manipulating unkeyed inputs like headers.

How do I safely test cache key behavior without serving malicious payloads to users?▼

Safely test cache key behavior by applying risk-limited testing guardrails designed for CDN and reverse proxy environments, ensuring test scenarios involving authenticated content and cacheable assets do not disrupt live traffic.

Why does my CDN cache authenticated user content despite unkeyed input variations?▼

Your CDN may cache authenticated content due to improper handling of unkeyed inputs and Vary header implications, where path normalization differences or header manipulations cause the cache to incorrectly store and serve private data.

Related Skills

Explore More Software Engineering Skills→
dreadnodedreadnode
11

web-cache-deception-path

Detect web cache deception vulnerabilities from inconsistent URL path parsing.

Official
Intermediate
ok-helloworldok-helloworld
241

web-cache-deception

Detect web cache deception and poisoning vulnerabilities across CDN intermediaries.

Community
Advanced
EntroVyxEntroVyx
3

cache-attack

Detect CDN providers and test web cache poisoning and deception vulnerabilities.

Community
Advanced
outfitter-devoutfitter-dev
28

security-engineering

Audit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.

Official
Advanced