Identify and validate SSRF vulnerabilities using out-of-band confirmation techniques.
npx skills add https://github.com/pdparchitect/rook --skill hunt-ssrf-pdparchitect
Please help me install this Agent Skill. Skill: hunt-ssrf Source: https://github.com/pdparchitect/rook/tree/main/skills/hunt-ssrf Command: npx skills add https://github.com/pdparchitect/rook --skill hunt-ssrf-pdparchitect
This skill addresses the critical security risk of Server-Side Request Forgery (SSRF), where applications are tricked into making unauthorized requests to internal or cloud-based resources.
Use the hunt-ssrf skill to audit the target endpoint for SSRF vulnerabilities by testing the url parameter with an out-of-band callback.
High-intent search queries and answers about installing and using this skill.
Blind SSRF vulnerabilities are confirmed using out-of-band (OOB) techniques like Burp Collaborator or interactsh to systematically verify network interactions and quantify the blast radius of potential exploits.
You can test internal infrastructure by targeting Kubernetes clusters, Redis instances, and internal APIs to demonstrate unauthorized data access or remote code execution resulting from SSRF vulnerabilities.
When auditing cloud-native infrastructure, you should target cloud metadata services and internal APIs to demonstrate unauthorized data access or remote code execution resulting from SSRF vulnerabilities.
Identifying SSRF vulnerabilities involves analyzing URL-input parameters and potential SSRF sinks across web applications and APIs to prevent unauthorized requests to internal or cloud-based resources.
asdfgh1445Identify SSRF attack surfaces in web applications and cloud environments.
wgpsecDetect and exploit cloud instance metadata across AWS, Azure, GCP, Alibaba Cloud, and Tencent Cloud.
securityfortechDetect and exploit SSRF vulnerabilities in user-controlled URL inputs.
EntroVyxPerform authorized web application penetration testing with proof-based exploitation.
