29 lines
802 B
YAML
29 lines
802 B
YAML
id: akamai-cache-detect
|
|
|
|
info:
|
|
name: Akamai Cache Detection
|
|
author: nybble04
|
|
severity: info
|
|
description: |
|
|
Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific response header value.
|
|
reference:
|
|
- https://community.akamai.com/customers/s/article/Using-Akamai-Pragma-headers-to-investigate-or-troubleshoot-Akamai-content-delivery?language=en_US
|
|
- https://spyclub.tech/2022/12/14/unusual-cache-poisoning-akamai-s3/
|
|
metadata:
|
|
max-request: 1
|
|
verified: true
|
|
tags: cache,akamai,tech
|
|
|
|
http:
|
|
- method: HEAD
|
|
path:
|
|
- "{{BaseURL}}"
|
|
headers:
|
|
Pragma: akamai-x-cache-on
|
|
|
|
matchers:
|
|
- type: regex
|
|
part: header
|
|
regex:
|
|
- '(?:TCP_HIT|TCP_MISS).*deploy\.akamaitechnologies\.com'
|