Identify and chain SSRF vulnerabilities in web services with OOB verification.
npx skills add https://github.com/chatbotkit/rook --skill hunt-ssrf-chatbotkit
Please help me install this Agent Skill. Skill: hunt-ssrf Source: https://github.com/chatbotkit/rook/tree/main/skills/hunt-ssrf Command: npx skills add https://github.com/chatbotkit/rook --skill hunt-ssrf-chatbotkit
This skill helps security professionals identify and chain SSRF vulnerabilities across web services to access internal networks and cloud metadata, enabling safer discovery and protection of attack surfaces.
Run the SSRF hunting workflow against a target API, map all URL-input parameters, configure a unique out-of-band callback, and verify internal-access before reporting.
High-intent search queries and answers about installing and using this skill.
To test for SSRF vulnerabilities in webhooks and link previews, map all URL-input parameters, configure a unique out-of-band callback, and verify internal access using reproducible workflows before reporting.
Out-of-band verification for SSRF detection proves vulnerability existence by configuring unique DNS or webhook callbacks to track payloads and confirm internal network interaction.
Access cloud metadata through SSRF chaining by applying payload catalog patterns designed for cloud-native environments to exploit URL inputs in headless rendering pipelines.
Yes, you can use SSRF testing workflows for bug bounty audits in container environments. They support end-to-end testing from input discovery to remediation reporting across cloud platforms.
Payloads for SSRF in PDF rendering pipelines include redirect patterns and headless context payloads provided by a comprehensive catalog covering internal services and cloud metadata.
Safely report SSRF findings during a pentest by following safe reporting gates that guide testers through reproducible workflows, ensuring verified internal access before finalizing remediation documentation.
sseshachalaIdentify XXE vulnerabilities in XML parsers via inline and DTD payloads.
SkobynDetect and exploit SSRF vulnerabilities in web applications.
wgpsecCrawl web targets with JavaScript rendering to discover hidden endpoints and API surfaces.
yaklangDocument DNS rebinding attacks that bypass SOP and expose internal services.
