28 lines
783 B
YAML
28 lines
783 B
YAML
|
id: akamai-cache-detect
|
||
|
|
|
||
|
|
info:
|
||
|
name: Akamai Cache Detection
|
||
|
|
author: nybble04
|
||
|
|
severity: info
|
||
|
|
description: |
|
||
|
|
Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific response header value.
|
||
|
|
reference:
|
||
|
|
- https://community.akamai.com/customers/s/article/Using-Akamai-Pragma-headers-to-investigate-or-troubleshoot-Akamai-content-delivery?language=en_US
|
||
|
|
- https://spyclub.tech/2022/12/14/unusual-cache-poisoning-akamai-s3/
|
||
|
|
metadata:
|
||
|
|
verified: true
|
||
|
|
tags: cache,akamai,tech
|
||
|
|
|
||
|
http:
|
||
|
|
- method: HEAD
|
||
|
path:
|
||
|
|
- "{{BaseURL}}"
|
||
|
|
headers:
|
||
|
|
Pragma: akamai-x-cache-on
|
||
|
|
|
||
|
|
matchers:
|
||
|
|
- type: regex
|
||
|
|
part: header
|
||
|
|
regex:
|
||
|
|
- '(?:TCP_HIT|TCP_MISS).*deploy\.akamaitechnologies\.com'
|