Add Web Cache Deception script for Targeted

[e1l1ya]

These files add to this changes:

1. Add Web Cache Deception script for targeted scripts

[psiinon]

Checkmarx One – Scan Summary & Details – 7e28f3cf-da43-4461-af17-b7781a82f630

Great job! No new security vulnerabilities introduced in this pull request

---

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR

[kingthorin]

To address the DCO requirement you'll need to sign-off the commit(s):

• https://github.com/zaproxy/zaproxy/blob/main/CONTRIBUTING.md#developer-certificate-of-origin
• https://git-scm.com/docs/git-commit#Documentation/git-commit.txt---signoff

[e1l1ya]

Hi again i add the sign-off the commit.

[kingthorin]

I haven't been able to test it. I don't see anything obviously wrong. Have you tested that the host header is set as you expect?

[kingthorin]

You should also add an entry in the changelog as part of the unreleased/added section
https://github.com/zaproxy/community-scripts/blob/main/CHANGELOG.md

[thc202]

The filename should also follow the guidelines: https://github.com/zaproxy/community-scripts/blob/main/CONTRIBUTING.md#naming-scripts

[kingthorin]

Any time it sends I'd suggest a try/catch. In the catch it should probably just bail with a message that an error occurred and quote the exception.getMessage(). Instead of just barfing over and over and over:

Ex:

------------------------------------------------------------
Target: https://scanme.nmap.org/
------------------------------------------------------------
[+] Starting Web Cache Deception tests...
[i] Base: https://scanme.nmap.org/

[!] Error sending to: https://scanme.nmap.org/;cachetest => java.net.NoRouteToHostException: No route to host
[!] Error sending to: https://scanme.nmap.org/%00cachetest => java.net.NoRouteToHostException: No route to host
[!] Error sending to: https://scanme.nmap.org/%0Acachetest => java.net.NoRouteToHostException: No route to host
[!] Error sending to: https://scanme.nmap.org/%09cachetest => java.net.NoRouteToHostException: No route to host
[!] Error sending to: https://scanme.nmap.org/.cachetest => java.net.NoRouteToHostException: No route to host
[!] Error sending to: https://scanme.nmap.org//cachetest => java.net.NoRouteToHostException: No route to host
[!] Error sending to: https://scanme.nmap.org/~cachetest => java.net.NoRouteToHostException: No route to host

Actually I guess it's when your sending method returns null, it may as well bail from whatever loop it's in.

[kingthorin]

When are you finding that it isn't set "properly"??