id: akamai-cache-detect

info:
  name: Akamai Cache Detection
  author: nybble04
  severity: info
  description: |
     Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific response header value.
  reference:
    - https://community.akamai.com/customers/s/article/Using-Akamai-Pragma-headers-to-investigate-or-troubleshoot-Akamai-content-delivery?language=en_US
    - https://spyclub.tech/2022/12/14/unusual-cache-poisoning-akamai-s3/
  metadata:
    max-request: 1
    verified: true
  tags: cache,akamai,tech

http:
  - method: HEAD
    path:
      - "{{BaseURL}}"
    headers:
      Pragma: akamai-x-cache-on

    matchers:
      - type: regex
        part: header
        regex:
          - '(?:TCP_HIT|TCP_MISS).*deploy\.akamaitechnologies\.com'