hunt-ssrf

Detect and exploit Server-Side Request Forgery vulnerabilities in web applications.

Updated Jul 1, 2026

Search Tags:#penetration testing #exploitation #web security #vulnerability detection #ssrf

Ready to run

npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-ssrf-bpnrockstar

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-ssrf
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/hunt-ssrf
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-ssrf-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, httpx, tldextract, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill is designed to detect and exploit Server-Side Request Forgery (SSRF) vulnerabilities in web applications, allowing users to identify potential security risks and take appropriate actions.

Core Features & Use Cases

SSRF Detection: Identifies SSRF vulnerabilities in web applications.
Exploitation: Provides payloads and methods to exploit SSRF vulnerabilities.
Use Case: For security professionals and penetration testers looking to identify SSRF vulnerabilities in web applications and exploit them to gain unauthorized access to internal systems.

Quick Start

Use the hunt-ssrf skill to detect SSRF vulnerabilities in the target application.

Frequently Asked Questions about hunt-ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect SSRF vulnerabilities in web applications?▼

To detect SSRF vulnerabilities in web applications, this Skill automates network requests and domain extraction to identify endpoints that allow unauthorized external service or internal resource access.

What is Server-Side Request Forgery and how does exploitation work?▼

Server-Side Request Forgery (SSRF) is a web security flaw where an attacker forces a server to make unauthorized requests. Exploitation leverages payloads to access internal systems or external services.

Do I need Python libraries to test for SSRF vulnerabilities?▼

Yes, you need the Python libraries requests, httpx, and tldextract installed in your environment to facilitate the network requests and domain extraction required for SSRF testing.

Can I use this for penetration testing to access internal resources?▼

Yes, this Skill is built for penetration testing and vulnerability detection, providing payloads and methods to exploit SSRF vulnerabilities and gain unauthorized access to internal systems.

What is the best way to identify web security risks related to SSRF?▼

The best way to identify SSRF web security risks is using automated detection scripts that analyze target applications for URL fetching behaviors, which this Skill provides for security professionals.

Why use tldextract for SSRF vulnerability detection?▼

Tldextract is used during SSRF vulnerability detection to accurately parse top-level domains from user-supplied URLs, helping identify domain redirections and blocklist bypasses during exploitation.