Hackmanit/Web-Cache-Vulnerability-Scanner

Health v2 · maintenance only

Adoption not part of the score

1200 stars · 161 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A fast, Go-based CLI scanner for detecting web cache poisoning and web cache deception vulnerabilities. It supports many attack techniques, includes a crawler, adapts to the target cache, and integrates into CI/CD pipelines.

Use cases

• scan a website for web cache poisoning vulnerabilities
• test for web cache deception attacks
• find unkeyed header and parameter poisoning in my CDN
• check if my site is vulnerable to request smuggling via cache
• integrate cache vulnerability scanning into CI/CD
• audit web cache security during a pentest
• crawl a site and test all URLs for cache flaws

When to choose

• you need automated detection of web cache poisoning or deception across many techniques
• you want a fast CLI tool that fits into CI/CD or bug bounty workflows
• you need JSON reports and proxy support (e.g., Burp Suite) for security testing

When to avoid

• you need a general-purpose web vulnerability scanner covering XSS, SQLi, etc.
• you want a GUI-based scanning tool
• you are not authorized to test the target site

Facets

cli-tool · maturity active

penetration-testing vulnerability-scanning security http-client web-scraping security penetration-testing web-development developer-tools cli windows go web-cache-poisoning web-cache-deception bugbounty security-audit pentesting http-request-smuggling json-reporting linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Hackmanit/Web-Cache-Vulnerability-Scanner")