web-cache-vulnerability-scanner

No entries match these filters. Clear filters

1. 2.0.0 Aug 24, 2025 · release notes

   WCVS 2.0 rewrites HTTP client with fasthttp, adds NextJS DoS techniques, new cache indicators, and RFC-violating request support.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0

   • Replaces net/http with fasthttp, enabling RFC-violating requests that can surface web cache poisoning vulnerabilities previously unreachable.
   • Adds cache indicator support for eo-cache-status, Netlify, x-kinsta-cache, and x-ac headers, broadening cache-hit detection coverage.
   • Introduces a new parameter encoding technique for detecting cache poisoning via unkeyed parameters.
   • Adds status code analysis as an indicator for identifying impactful or unkeyed parameters.
   • Expands UTM parameter list with gad_campaignid for broader parameter fuzzing.

   +10 more show less

   • Adds multiple new cache-based DoS testing techniques, including NextJS-specific methods.
   • Adds enhanced DoS headers with metacharacters and streamlines Host Header Override (HHO) DoS testing.
   • Supports setting multiple host headers for host header poisoning tests.
   • Introduces X-Original-URL redirect-based testing method.
   • Adds support for testing with non-RFC-compliant headers.
   • New flag for selecting specific reason types to target during testing.
   • Adds rate limiting (limiter) for deception testing.
   • Defaults logging to off, reducing noise unless explicitly enabled.
   • Limits CSS poisoning checks to HTTP 200 responses to reduce false positives.
   • Enhances reporting with reflection context, counts for body and header reflections, and improved file naming.

   15 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Logging is now off by default; setups relying on automatic log generation will no longer produce logs without explicitly overriding this setting.
2. 1.4.0 Apr 17, 2025 · release notes

   WCVS 1.4.0 adds parameter pollution detection, hardcoded default wordlists, and new --skipwordlistcachbuster / --nolog flags.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.4.0 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.4.0

   └──▷ TRY IT
   Scan without writing a log file and skip wordlist-based cachebuster probing when you already control the cachebuster parameter.
   copy

   $ wcvs -u https://example.com/page --nolog --skipwordlistcachbuster

   • Adds parameter pollution as a new web-cache poisoning detection technique.
   • Hardcodes default parameter and header wordlists into the binary — no --wordlist flag required for standard scans.
   • New --skipwordlistcachbuster flag skips wordlist-based cachebuster discovery, useful when you already know the cachebuster parameter.
   • New --nolog flag suppresses log-file creation for cleaner CI or ephemeral-environment runs.
   • Cachebuster values now carry a cb prefix and poison values a p prefix, making the two easier to distinguish in output — especially when the cachebuster parameter is itself vulnerable to parameter pollution.

   5 details in Everything

3. 1.3.0 Nov 6, 2024 · release notes

   WCVS 1.3.0 adds new web cache deception techniques, a time-based detection skip flag, and Kali Linux repo availability.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.3.0 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.3.0

   └──▷ TRY IT
   Suppress time-based cache inference when scanning a target prone to slow responses, avoiding false-positive cache detections that trigger unnecessary follow-on tests.
   copy

   $ wcvs -u https://example.com --stime

   • Adds multiple new detection techniques for web cache deception vulnerabilities.
   • Now checks for web cache deception even when no cache indicator is spotted beforehand, expanding coverage.
   • New -skiptimebased/--stime flag disables time-based cache guessing to reduce false positives and unnecessary test runs.
   • WCVS is now available natively in the Kali Linux (and BlackArch) package repository.

   4 details in Everything

4. 1.2.1 Mar 20, 2024 · release notes

   Adds --ignorestatus / -is flag to WCVS to ignore specific HTTP response codes and reduce false positives.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.2.1 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.2.1

   └──▷ TRY IT
   Scan a target while ignoring 418 and 429 responses to prevent WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server.-induced false positives.
   copy

   $ ./wcvs -is 418,429 -u https://example.com

   • Adds the --ignorestatus (-is) flag to allow ignoring specific HTTP status codes during scanning.

   1 detail in Everything

5. 1.2.0 Feb 9, 2024 · release notes

   Web Cache-Vulnerability-Scanner 1.2.0 adds Web Cache Deception detection with support for additional cache headers

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.2.0 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.2.0

6. 1.1.1 Dec 6, 2023 · release notes

   web-cache-vulnerability-scanner v1.1.1 adds automatic curl command generation for identified cache poisoning attacks

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.1.1 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.1.1

   • Converts identified web cache poisoning requests to a curl command printed to stdout and included in the report.
   • Adds custom cache header example to README

   2 details in Everything

7. 1.0.1 Jan 13, 2022 · release notes

   Adds docker install option and new DOS detection variants to web-cache-vulnerability-scanner

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.1 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.0.1

   • added install option 3 - docker
   • added new DOS variant: X-Forward-Scheme
   • added new DOS variant: Set User-Agent to a probable blacklisted security scanner

   3 details in Everything

8. 1.0.0 Oct 27, 2021 · release notes

   Adds --time-diff flag to configure the time difference between cache hits and misses

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.0 https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.0.0

   └──▷ USE IT
   Tune the timing window for detection to reduce false positives in high-latency environments.
   shell copy

   web-cache-vulnerability-scanner --target https://example.com --time-diff 500