skills.rest
Kisilev13
Kisilev13COMMUNITY
Explore all skills by this author →
GitHub

hunt-ssrf

Detect SSRF vulnerabilities by examining network traffic and validating SSRF payloads.

Updated Jun 18, 2026
Search Tags:#security#vulnerability assessment#network analysis#cloud security#SSRF
One-click install
npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-ssrf-kisilev13
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-ssrf
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/hunt-ssrf
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-ssrf-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Identifies SSRF vulnerabilities in a target's system to protect against potential security breaches and unauthorized data access.

Core Features & Use Cases

  • Identify SSRF Vulnerabilities: Automatically scans target systems for SSRF vulnerabilities using various detection methods.
  • Diverse Targets: Compatible with different types of systems including cloud-based and on-premise.
  • Out-of-Band Detection: Provides an out-of-band (OOB) detection mechanism to confirm SSRF blind cases.

Quick Start

Use the skill to scan a target domain for SSRF vulnerabilities.

Frequently Asked Questions about hunt-ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect SSRF vulnerabilities in cloud and on-premise systems?▼

Cloud metadata services exposed through SSRF are detected by validating server responses against known payloads targeting metadata endpoints. The skill specifically checks if unvalidated requests can query and control server metadata.

Can I use out-of-band detection to confirm blind SSRF cases?▼

Yes, out-of-band (OOB) detection is provided to confirm blind SSRF cases. This mechanism validates vulnerabilities even when the server does not return direct responses to the malicious requests.

How do I scan a target domain for server-side request forgery?▼

You can scan a target domain for server-side request forgery by running the skill against systems where network data can be queried via user-controllable endpoints. It automatically applies detection methods to find unvalidated requests.

Does this SSRF scanner work without external dependencies?▼

Yes, the SSRF scanner works without external dependencies. It operates autonomously to examine network traffic and validate responses using its internal scripts, references, and assets.

What is the best way to find unvalidated requests from user-controllable endpoints?▼

The best way to find unvalidated requests is to examine network traffic for user-controllable endpoints that query server metadata. The skill validates responses against known SSRF payloads to detect these exposures.

Related Skills

Explore More Software Engineering Skills→
alexfazioalexfazio
159

cc-trace

Intercept and inspect Claude Code API traffic using mitmproxy.

Community
Advanced
Sir-chawakornSir-chawakorn
9

remediate-web-vulnerabilities

Apply canonical hardening patterns to fix web vulnerability classes.

Community
Advanced
riparinoriparino
1

defensive-ssrf

Detect SSRF exploitation attempts across cloud metadata endpoints and internal network calls.

Community
Intermediate
cmndcntrlcybercmndcntrlcyber
3

hunt-csrf

Scan web applications for CSRF vulnerabilities using predefined patterns.

Community
Intermediate