skills.rest
xjtu-wang
xjtu-wangCOMMUNITY
Explore all skills by this author →
GitHub

competition-ssrf-metadata-pivot

Trace SSRF reachability from sources to internal metadata endpoints.

4|Updated Apr 9, 2026
Search Tags:#metadata#traceability#ctf#ssrf#pivot#credential#security-analysis
One-click install
npx skills add https://github.com/xjtu-wang/DigAgent --skill competition-ssrf-metadata-pivot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: competition-ssrf-metadata-pivot
Source: https://github.com/xjtu-wang/DigAgent/tree/main/.agents/skills/competition-ssrf-metadata-pivot
Command: npx skills add https://github.com/xjtu-wang/DigAgent --skill competition-ssrf-metadata-pivot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps security teams trace complex SSRF attack chains by mapping reachability from an SSRF source to internal or metadata endpoints, enabling credential pivots to be identified and mitigated.

Core Features & Use Cases

  • Map SSRF reachability across internal networks and metadata endpoints
  • Reproduce decisive SSRF chains to validate access controls and protection mechanisms
  • Provide actionable evidence and recommended mitigations for downstream services

Quick Start

Trace an SSRF path from source to accepted access to validate containment and privilege escalation patterns.

Frequently Asked Questions about competition-ssrf-metadata-pivot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I trace SSRF reachability to internal metadata endpoints?▼

Trace SSRF reachability by mapping server-side fetch paths from a given SSRF source to internal services and metadata endpoints, verifying accepted downstream paths and token fields to determine potential privilege exposure.

What is the best way to identify credential pivots during SSRF analysis?▼

Identify credential pivots by analyzing SSRF attack chains that route to metadata endpoints, validating access controls and token exposure to determine downstream privilege escalation risks in security audits.

Can I use this to validate SSRF access controls in a CTF scenario?▼

Yes, you can reproduce decisive SSRF chains in CTF or security-audit scenarios to validate containment mechanisms, verify routing from the orchestrator, and assess access control risks within an established sandbox context.

How does metadata traceability work for server-side request forgery vulnerabilities?▼

Metadata traceability for SSRF works by mapping reachability from the source to internal endpoints, verifying token fields and acceptable downstream paths to expose privilege escalation patterns and recommend mitigations.

Do I need an established sandbox context to perform SSRF security analysis?▼

Yes, an established sandbox context and routing from the orchestrator are required to safely verify reachability, trace token fields, and validate acceptable downstream paths during SSRF security analysis.

Why does my SSRF pivot trace fail to expose downstream credentials?▼

SSRF pivot traces fail to expose credentials when reachability to metadata endpoints is blocked, token fields are missing, downstream paths are restricted, or the sandbox context and orchestrator routing are not established.

Related Skills

Explore More Software Engineering Skills→
yo-stevenyo-steven

nemoclaw-user-monitor-sandbox

Diagnose failing NemoClaw sandboxes via health, logs, and live network activity.

Community
Intermediate
xjtu-wangxjtu-wang
4

competition-linux-credential-pivot

Trace Linux credential artifacts and host-to-host pivot chains in sandboxed environments.

Community
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
utsavthakurutsavthakur

ssrf-server-side-request-forgery

Identify and exploit SSRF vulnerabilities using cloud metadata endpoints and payloads.

Community
Advanced