skills.rest
Skobyn
SkobynCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-ssrf

Detect and exploit SSRF vulnerabilities in web applications.

Updated Jun 24, 2026
Search Tags:#vulnerability#cloud security#bug hunting#ssrf#network exploitation
One-click install
npx skills add https://github.com/Skobyn/talon --skill hunt-ssrf-skobyn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-ssrf
Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-ssrf
Command: npx skills add https://github.com/Skobyn/talon --skill hunt-ssrf-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires interactsh-client, ffuf, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps identify and exploit SSRF (Server-Side Request Forgery) vulnerabilities in cloud and internal networks, allowing for security assessments and bug hunting.

Core Features & Use Cases

  • SSRF Detection: Identifies potential SSRF vulnerabilities in applications.
  • Exploitation: Provides payloads and methods to exploit SSRF vulnerabilities.
  • Use Case: Use this Skill to scan a web application for SSRF vulnerabilities and exploit them to access internal network resources.

Quick Start

Run the 'hunt-ssrf' skill to scan a target application for SSRF vulnerabilities.

Frequently Asked Questions about hunt-ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect and exploit SSRF vulnerabilities in web applications?▼

SSRF vulnerabilities allow attackers to send crafted requests from the vulnerable server to internal networks. This Skill identifies these entry points and provides exploitation payloads to access cloud metadata endpoints and internal resources.

What tools do I need to scan for SSRF and cloud metadata endpoints?▼

You need the interactsh-client for out-of-band vulnerability detection and ffuf for network scanning and HTTP request fuzzing to successfully identify and exploit SSRF entry points.

Can I use this for bug hunting on internal network resources?▼

Yes, this Skill is designed for bug hunting and security assessments. It identifies exposed internal network resources and cloud metadata endpoints vulnerable to SSRF attacks during web application testing.

How does an SSRF vulnerability expose cloud metadata endpoints?▼

SSRF vulnerabilities expose cloud metadata endpoints by allowing attackers to force the vulnerable server to send requests to internal cloud IPs, extracting sensitive instance metadata and credentials from the internal network.

What is the best way to identify client-side JavaScript vulnerabilities during SSRF testing?▼

Identifying client-side JavaScript vulnerabilities during SSRF testing involves analyzing application scripts for unsafe request handling and leveraging crafted HTTP requests to map internal network resources exposed through the vulnerable endpoints.

Related Skills

Explore More Software Engineering Skills→
jayjpatel9717jayjpatel9717

ssrf-testing

Detect and classify SSRF vulnerabilities in web applications.

Community
Advanced
asdfgh1445asdfgh1445
735

Strix•SSRF 测试

Identify SSRF attack surfaces in web applications and cloud environments.

Community
Intermediate
woohyun212woohyun212
21

web-vuln-ssrf

Detects SSRF vulnerabilities in web applications using OOB callbacks and metadata probes.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

Burp Suite Web Application Testing

Intercept and modify HTTP traffic to test web application security.

Community
Advanced