Web cache poisoning vulnerability scanner.
-
Updated
May 5, 2022 - Python
#
web-cache-deception
Here are 11 public repositories matching this topic...
A simple bash script for Web Cache Deception exploitation.
-
Updated
Oct 7, 2024 - Shell
🛡️ Burp Suite extension for automated access control bypass, path traversal & Web Cache Deception testing. Header spoofing, URL encoding, cache deception pipelines – all in one tool.
penetration-testing web-security fuzzer bypass access-control web-security-research security-testing bypass-waf path-traversal burp-suite web-cache-deception montoya-api header-bypasser web-security-scanner burp-extension bypass-firewal
-
Updated
Aug 6, 2026 - Java
Lightweight CLI tool for testing web cache deception vulnerabilities. Built to avoid manual testing, bloated recon tools, and GUI-based platforms. Simple, fast, and script-friendly.
python3 penetration-testing bug-bounty recon offensive-security security-automation cli-tool vulnerability-testing cache-poisoning web-cache-deception
-
Updated
Mar 10, 2025 - Python
Personal research notes on Web Cache Deception (WCD) attacks — covering path mapping, delimiter & normalization discrepancies, payload lists, delimiter fuzzing wordlists, and Burp Suite tips. Based on PortSwigger Web Security Academy + hands-on bug bounty work.
-
Updated
Jun 27, 2026
Web reconnaissance & cache-deception attack-chain tooling for authorized CTF / lab testing
python security pentesting ctf reconnaissance http-request-smuggling web-cache-deception web-cache-poisoning
-
Updated
Jun 20, 2026 - Python
CacheBoom - Security-focused web cache vulnerability scanner for detecting Web Cache Poisoning and Web Cache Deception vulnerabilities in web applications.
python hacking pentesting bugbounty pentesting-tools web-cache-deception web-cache-poisoning bugbountytools web-application-penetration-testing
-
Updated
Feb 2, 2026 - Python
Passive Chrome extension that flags web cache deception signals while you browse - it spots the static-path and delimiter mismatch, and never sends a request of its own.
chrome-extension penetration-testing bug-bounty web-security browser-extension appsec security-tools manifest-v3 web-cache-deception cache-deception
-
Updated
Sep 30, 2026 - JavaScript
Dockerized lab reproducing a Web Cache Deception vulnerability (Node.js app behind an nginx cache)
-
Updated
Jan 26, 2021 - JavaScript
Web Cache Deception lab — vulnerable reverse proxy + exploitation scripts for learning and testing
-
Updated
May 21, 2026 - Python
Complete wordlist of 170 static file extensions for testing Web Cache Deception (WCD) vulnerabilities - bug bounty ready
wordlist bug-bounty web-security pentesting offensive-security burpsuite web-cache-deception cache-deception
-
Updated
Aug 23, 2026
Add this topic to your repo
To associate your repository with the web-cache-deception topic, visit your repo's landing page and select "manage topics."