Lightlines
By yaklang

web-cache-deception

yaklang3.3k installs

Find private data leaks in your website's cache.

What it does

Guides website security testing for cached private-data leaks and poisoned responses.

When to use it

Use when CDN, reverse-proxy, or application caching may expose authenticated content through path confusion or cache-key manipulation.

How to use it

Give it a target website URL; it guides cache-vulnerability testing and an assessment of the impact.

What you provide

  • the target website URL

Good to know

  • cannot be undone: messages to the victim

Latest review

What you need · 1

The authenticated cache-deception verification uses a victim's session cookie; the files do not specify how to obtain it.


Access · 2

This skill

messages to the victim

Write

Sends crafted URLs to victims (irreversible)

target website

Write

Attempts to poison shared caches