wgpsec/aboutsecurity

cache-poisoning-smuggling

Web 缓存投毒和 HTTP 请求走私。当目标使用 CDN/反向代理/缓存层（Cloudflare/Varnish/Nginx）、或有前后端服务器架构差异时使用。通过操纵缓存键或利用 HTTP 解析差异来投毒缓存或绕过安全控制。高级 Web 攻击技术

First seen Mar 25, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity

View on skills.sh ↗ GitHub repository ↗

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Exploiting web cache mechanisms to serve malicious content to other users by poisoning cached r…

Audit MCP servers for tool poisoning, tool shadowing, rug pulls, SSRF, and unauthenticated expo…

Discovers and maps adversary-controlled infrastructure (C2 servers, phishing domains, exploit-k…

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity

More details

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared

Cursor Not declared

Codex Not declared

GitHub Copilot Not declared

Windsurf Not declared

Gemini CLI Not declared

Cline Not declared

OpenCode Not declared

Stars 1.7K

Default branch master

Open issues 0

Status Active

npx skills add https://github.com/wgpsec/aboutsecurity