Skip to content

Add Web Cache Deception script for Targeted #498

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 6 commits into
base: main
Choose a base branch
from
Open

Add Web Cache Deception script for Targeted #498

wants to merge 6 commits into from

Conversation

@e1l1ya
Copy link

@e1l1ya e1l1ya commented Oct 26, 2025

These files add to this changes:

  1. Add Web Cache Deception script for targeted scripts

@psiinon
Copy link
Member

psiinon commented Oct 26, 2025 •
edited
Loading

Logo
Checkmarx One – Scan Summary & Details – 7e28f3cf-da43-4461-af17-b7781a82f630

Great job! No new security vulnerabilities introduced in this pull request

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR

kingthorin
kingthorin reviewed Oct 26, 2025
View reviewed changes
@kingthorin
Copy link
Member

kingthorin commented Oct 26, 2025

To address the DCO requirement you'll need to sign-off the commit(s):

@e1l1ya e1l1ya force-pushed the main branch 2 times, most recently from 072e849 to f9ac05a Compare October 27, 2025 06:39
@e1l1ya
Copy link
Author

e1l1ya commented Oct 27, 2025

Hi again i add the sign-off the commit.

kingthorin
kingthorin reviewed Oct 29, 2025
View reviewed changes
Copy link
Member

@kingthorin kingthorin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I haven't been able to test it. I don't see anything obviously wrong. Have you tested that the host header is set as you expect?

@kingthorin
Copy link
Member

kingthorin commented Oct 30, 2025

You should also add an entry in the changelog as part of the unreleased/added section
https://github.com/zaproxy/community-scripts/blob/main/CHANGELOG.md

@thc202
Copy link
Member

thc202 commented Oct 30, 2025

The filename should also follow the guidelines: https://github.com/zaproxy/community-scripts/blob/main/CONTRIBUTING.md#naming-scripts

e1l1ya added 6 commits November 2, 2025 05:45
@e1l1ya
Targeted script for detect Web Cache Deception
d001925 
Signed-off-by: eiliya keshtkar <[email protected]>
@e1l1ya
Change HttpSender request method.
a8dcf36 
Signed-off-by: eiliya keshtkar <[email protected]>
@e1l1ya
-h
d9eaedd 
Signed-off-by: eiliya keshtkar <[email protected]>
@e1l1ya
File name changed
1d601a5 
Signed-off-by: eiliya keshtkar <[email protected]>
@e1l1ya
Add WebCacheDeception.js file
17904e7 
Signed-off-by: eiliya keshtkar <[email protected]>
@e1l1ya
Just change a comment.
186f99c 
Signed-off-by: eiliya keshtkar <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kingthorin kingthorin kingthorin left review comments

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@e1l1ya @psiinon @kingthorin @thc202