hunt-ssrf

Detect and exploit SSRF vulnerabilities in web applications.

Updated Jun 24, 2026

Search Tags:#vulnerability #cloud security #bug hunting #ssrf #network exploitation

Ready to run

npx skills add https://github.com/Skobyn/talon --skill hunt-ssrf-skobyn

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-ssrf
Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-ssrf
Command: npx skills add https://github.com/Skobyn/talon --skill hunt-ssrf-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires interactsh-client, ffuf, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps identify and exploit SSRF (Server-Side Request Forgery) vulnerabilities in cloud and internal networks, allowing for security assessments and bug hunting.

Core Features & Use Cases

SSRF Detection: Identifies potential SSRF vulnerabilities in applications.
Exploitation: Provides payloads and methods to exploit SSRF vulnerabilities.
Use Case: Use this Skill to scan a web application for SSRF vulnerabilities and exploit them to access internal network resources.

Quick Start

Run the 'hunt-ssrf' skill to scan a target application for SSRF vulnerabilities.

Frequently Asked Questions about hunt-ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect and exploit SSRF vulnerabilities in web applications?▼

SSRF vulnerabilities allow attackers to send crafted requests from the vulnerable server to internal networks. This Skill identifies these entry points and provides exploitation payloads to access cloud metadata endpoints and internal resources.

What tools do I need to scan for SSRF and cloud metadata endpoints?▼

You need the interactsh-client for out-of-band vulnerability detection and ffuf for network scanning and HTTP request fuzzing to successfully identify and exploit SSRF entry points.

Can I use this for bug hunting on internal network resources?▼

Yes, this Skill is designed for bug hunting and security assessments. It identifies exposed internal network resources and cloud metadata endpoints vulnerable to SSRF attacks during web application testing.

How does an SSRF vulnerability expose cloud metadata endpoints?▼

SSRF vulnerabilities expose cloud metadata endpoints by allowing attackers to force the vulnerable server to send requests to internal cloud IPs, extracting sensitive instance metadata and credentials from the internal network.

What is the best way to identify client-side JavaScript vulnerabilities during SSRF testing?▼

Identifying client-side JavaScript vulnerabilities during SSRF testing involves analyzing application scripts for unsafe request handling and leveraging crafted HTTP requests to map internal network resources exposed through the vulnerable endpoints.