moai-security-ssrf

SSRF protection validates and filters outbound URLs to prevent attackers from accessing internal resources. This Skill implements URL parsing, allowlist checks, DNS resolution with private IP detection, and monitoring to block malicious requests in enterprise applications and APIs.

URL validation combines allowlist-based filtering, DNS rebinding protection, and private IP detection. This Skill applies intelligent request filtering with Context7 threat intelligence and WAF integration to catch anomalies before they reach internal systems.

Yes. This Skill integrates with WAF hooks and supports middleware architectures for APIs and web applications. It provides secure default configurations and zero-setup deployment, fitting existing production environments without custom infrastructure.

DNS rebinding protection resolves domain names and detects when attackers switch IP responses to redirect requests to private addresses. This Skill combines DNS resolution with private IP detection to block these time-of-check-to-time-of-use attacks.

Redirect validation checks target URLs against allowlists and applies the same private IP and anomaly detection rules as initial requests. This Skill logs and blocks redirects that fail validation, preventing attackers from bypassing filters through multi-hop chains.

Traditional allowlists work, but AI-powered validation via Context7 adds intelligent anomaly detection and threat intelligence to catch evolving attack patterns. This Skill combines both for enterprise security standards and production deployment requirements.