skills.rest
bpnrockstar
bpnrockstarCOMMUNITY
Explore all skills by this author →
GitHub

hunt-ssrf

Detect and exploit Server-Side Request Forgery vulnerabilities in web applications.

Updated Jul 1, 2026
Search Tags:#penetration testing#exploitation#web security#vulnerability detection#ssrf
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-ssrf-bpnrockstar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-ssrf
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/hunt-ssrf
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-ssrf-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, httpx, tldextract, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill is designed to detect and exploit Server-Side Request Forgery (SSRF) vulnerabilities in web applications, allowing users to identify potential security risks and take appropriate actions.

Core Features & Use Cases

  • SSRF Detection: Identifies SSRF vulnerabilities in web applications.
  • Exploitation: Provides payloads and methods to exploit SSRF vulnerabilities.
  • Use Case: For security professionals and penetration testers looking to identify SSRF vulnerabilities in web applications and exploit them to gain unauthorized access to internal systems.

Quick Start

Use the hunt-ssrf skill to detect SSRF vulnerabilities in the target application.

Frequently Asked Questions about hunt-ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect SSRF vulnerabilities in web applications?▼

To detect SSRF vulnerabilities in web applications, this Skill automates network requests and domain extraction to identify endpoints that allow unauthorized external service or internal resource access.

What is Server-Side Request Forgery and how does exploitation work?▼

Server-Side Request Forgery (SSRF) is a web security flaw where an attacker forces a server to make unauthorized requests. Exploitation leverages payloads to access internal systems or external services.

Do I need Python libraries to test for SSRF vulnerabilities?▼

Yes, you need the Python libraries requests, httpx, and tldextract installed in your environment to facilitate the network requests and domain extraction required for SSRF testing.

Can I use this for penetration testing to access internal resources?▼

Yes, this Skill is built for penetration testing and vulnerability detection, providing payloads and methods to exploit SSRF vulnerabilities and gain unauthorized access to internal systems.

What is the best way to identify web security risks related to SSRF?▼

The best way to identify SSRF web security risks is using automated detection scripts that analyze target applications for URL fetching behaviors, which this Skill provides for security professionals.

Why use tldextract for SSRF vulnerability detection?▼

Tldextract is used during SSRF vulnerability detection to accurately parse top-level domains from user-supplied URLs, helping identify domain redirections and blocklist bypasses during exploitation.

Related Skills

Explore More Software Engineering Skills→
ivegamsftivegamsft

penetration-testing

Automate penetration testing workflows with Python libraries for vulnerability assessment.

Community
Advanced
balsm-healthbalsm-health
2

exploiting-server-side-request-forgery

Automate SSRF vulnerability testing and exploitation during authorized penetration tests.

Official
Advanced
yhy0yhy0
518

rce

Automate detection and exploitation workflows for remote code execution vulnerabilities.

Community
Advanced
ripgraphicsripgraphics

web-security-expert

Identify and test OWASP Top 10 web vulnerabilities like SQL injection and XSS.

Community
Intermediate