domains / families / security / cache-attack

cache-attack

separate

Poison CDN cache or deceive when X-Cache header is detected.

When to use

• Target uses a CDN (CloudFront, Cloudflare, Fastly) or reverse proxy (Varnish, Nginx cache).
• Headers show `X-Cache`, `Age`, `cf-cache-status`, or `X-Cache-Hits`.
• After surface recon finds no direct vulnerabilities — pivot to infrastructure layer.
• Target allows file extension manipulation in URL paths (.css, .json, .js).

When not to use

• Direct vulnerability scanning
• Non-CDN targets without cache headers

Skill page

Source