Detect Web Cache Deception vulnerabilities

[https://github.com/Golim/wcde](https://github.com/Golim/wcde)

This tool is an automated crawler that detects Web Cache Deception vulnerabilities in websites in a black-box manner by simply providing the domain name. Optionally, you can provide authentication cookies in a JSON file to perform the tests in an authenticated way.

We used this tool to perform a large-scale analysis on the Alexa Top 10k and found more than 1k vulnerable sites. You can find the results in our paper [Web Cache Deception Escalates!](https://www.usenix.org/conference/usenixsecurity22/presentation/mirheidari). We were able to …

cache cybersecurity deception vulnerabilities web web cache