Detect and exploit SSRF vulnerabilities in web applications.
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-ssrf-cybersecwoman
Please help me install this Agent Skill. Skill: hunt-ssrf Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-ssrf Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-ssrf-cybersecwoman
This Skill automates the detection and exploitation of Server-Side Request Forgery (SSRF) vulnerabilities in web applications, enabling security researchers to quickly identify and report potential security issues.
Run the skill to scan the target application for SSRF vulnerabilities.
High-intent search queries and answers about installing and using this skill.
You can detect SSRF vulnerabilities by analyzing HTTP requests and responses to see if the server processes external URLs. This Skill automates that exact detection process for web applications.
You exploit Server-Side Request Forgery by sending payloads that trick the server into making requests to internal services. This Skill provides specific payloads and methods to exploit detected SSRF vulnerabilities.
Yes, you need Python and libraries including requests, BeautifulSoup, and lxml to run this Skill. These dependencies are required for parsing HTTP responses and executing SSRF detection and exploitation.
The best way to automate SSRF detection is using a script-based approach that analyzes HTTP traffic and tests payloads automatically. This Skill automates the entire process from detection to providing exploitation methods.
Yes, you can use this Skill to exploit detected SSRF vulnerabilities to access internal services or exfiltrate data. It provides the necessary payloads and methods to interact with internal network resources.
SSRF detection requires parsing HTTP requests and responses to identify when a server fetches external or internal resources. Analyzing this traffic reveals if user-supplied URLs are processed by the backend.
Prohao42Identify open redirect vulnerabilities by analyzing URL parameters and sinks.
SkobynDetect and exploit SSRF vulnerabilities in web applications.
rahmatullahbossTest web input points with crafted HTML payloads for unescaped rendering.
hyperlane-xyzAnalyze Solidity contracts for security vulnerabilities using Trail of Bits methodologies.
