hunt-ssrf

Detect and exploit SSRF vulnerabilities in web applications.

5|Updated May 27, 2026

Search Tags:#exploitation #vulnerability detection #web application security #ssrf #security research

Ready to run

npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-ssrf-cybersecwoman

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-ssrf
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-ssrf
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-ssrf-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, BeautifulSoup, lxml, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the detection and exploitation of Server-Side Request Forgery (SSRF) vulnerabilities in web applications, enabling security researchers to quickly identify and report potential security issues.

Core Features & Use Cases

SSRF Detection: Automatically identifies SSRF vulnerabilities in web applications.
Exploitation: Provides payloads and methods to exploit detected SSRF vulnerabilities.
Use Case: Use this Skill to scan a web application for SSRF vulnerabilities and then exploit them to access internal services or exfiltrate data.

Quick Start

Run the skill to scan the target application for SSRF vulnerabilities.

Frequently Asked Questions about hunt-ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect SSRF vulnerabilities in web applications?▼

You can detect SSRF vulnerabilities by analyzing HTTP requests and responses to see if the server processes external URLs. This Skill automates that exact detection process for web applications.

How do I exploit Server-Side Request Forgery to access internal services?▼

You exploit Server-Side Request Forgery by sending payloads that trick the server into making requests to internal services. This Skill provides specific payloads and methods to exploit detected SSRF vulnerabilities.

Do I need Python and specific libraries to scan for SSRF?▼

Yes, you need Python and libraries including requests, BeautifulSoup, and lxml to run this Skill. These dependencies are required for parsing HTTP responses and executing SSRF detection and exploitation.

What is the best way to automate SSRF detection during security research?▼

The best way to automate SSRF detection is using a script-based approach that analyzes HTTP traffic and tests payloads automatically. This Skill automates the entire process from detection to providing exploitation methods.

Can I use this SSRF exploitation skill to exfiltrate data from internal networks?▼

Yes, you can use this Skill to exploit detected SSRF vulnerabilities to access internal services or exfiltrate data. It provides the necessary payloads and methods to interact with internal network resources.

Why does SSRF detection require parsing HTTP requests and responses?▼

SSRF detection requires parsing HTTP requests and responses to identify when a server fetches external or internal resources. Analyzing this traffic reveals if user-supplied URLs are processed by the backend.