Hackmanit/Web-Cache-Vulnerability-Scanner
Web Cache Vulnerability Scanner
This project is an automated security scanner designed to identify vulnerabilities within web caching layers. It functions as an HTTP protocol security tool that probes web infrastructure by manipulating request headers, parameters, and cookies to observe how servers handle and store content.
The scanner distinguishes itself through specialized cache behavior analysis, which targets specific flaws such as cache poisoning and cache deception. It incorporates a recursive crawler to map web application endpoints and utilizes configurable proxy routing to facilitate traffic inspection and debugging during the assessment process.
To support integration into automated workflows, the tool includes request throttling to manage network intensity and exports security findings into structured, machine-readable formats. The software is distributed as a command-line utility for use in security testing and penetration testing environments.
Features
- Web Cache Poisoning - Automates the detection of cache poisoning and cache deception flaws by testing how web servers handle manipulated HTTP requests.
- Cache Vulnerability Analyzers - Examines web cache configurations and tests for vulnerabilities like cache poisoning and deception by manipulating headers, parameters, and cookies.
- HTTP Header Manipulators - Injects custom payloads into request headers and parameters to probe cache behavior and identify potential storage vulnerabilities.
- Protocol - Analyzes how web caches handle manipulated requests to detect potential unauthorized content storage.
- Security Testing Tools - Provides an automated scanner for discovering web application vulnerabilities through recursive crawling and targeted request manipulation.
- Web Application Penetration Testing - Probes web infrastructure for security weaknesses by crawling endpoints and analyzing how caching mechanisms respond to custom headers and parameters.
- Web Application Security Assessments - Integrates security testing into development pipelines to identify potential vulnerabilities in web applications before they reach production environments.
- Traffic Proxying - Routes security scan traffic through external proxies to inspect HTTP requests and debug interactions with complex web caching layers.
- Recursive Crawlers - Traverses web applications by parsing HTML content to discover and map reachable endpoints for comprehensive security assessment coverage.
- Web Crawling - Traverses web applications to discover linked URLs, hidden paths, and target domains, expanding the total surface area covered during an automated security assessment.
- Cache Analysis - CLI scanner for identifying web cache poisoning issues.
