Create cache-poisoning.yaml

vulnerabilities/generic/cache-poisoning.yaml

@@ -0,0 +1,24 @@
+id: cache-poisoning    
+
+info:
+  name: Cache Poisoning
+  author: melbadry9 & xelkomy
+  severity: low
+  reference: https://blog.melbadry9.xyz/fuzzing/nuclei-cache-poisoning
+
+requests:
+  - raw:
+      - |
+        GET /?mel=9 HTTP/1.1
+        X-Forwarded-Prefix: cache.melbadry9.com
+        X-Forwarded-Host: cache.melbadry9.com
+        X-Forwarded-For: cache.melbadry9.com
+
+      - |
+        GET /?mel=9 HTTP/1.1
+
+    req-condition: true
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body_2, "cache.melbadry9.com") == true'