Detect SSRF vulnerabilities in web applications and APIs from user-controlled input.
npx skills add https://github.com/fatihkan/badi --skill sc-ssrf-fatihkan
Please help me install this Agent Skill. Skill: sc-ssrf Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-ssrf Command: npx skills add https://github.com/fatihkan/badi --skill sc-ssrf-fatihkan
SSRF vulnerabilities occur when user-controlled input triggers server-side HTTP requests, potentially exposing internal services and cloud metadata endpoints.
Run a scan against your web application to detect SSRF vulnerabilities and surface findings.
High-intent search queries and answers about installing and using this skill.
You can detect SSRF vulnerabilities by scanning web applications and APIs to identify where user-controlled input triggers server-side HTTP requests. This process flags direct SSRF, blind SSRF, DNS rebinding, and cloud metadata access attempts across your endpoints.
DNS rebinding is an SSRF technique where user-controlled URLs bypass restrictions to access internal services. The scanner identifies these rebinding patterns alongside direct and blind SSRF attempts to prevent unauthorized internal resource access.
Yes, security teams can integrate this scanning into CI pipelines and runtime scanners. It proactively surfaces SSRF findings and outputs structured severity data with remediation guidance to support secure development workflows.
You can block cloud metadata access by running scans that flag attempts to reach cloud metadata endpoints via user-controlled URLs. The scanner outputs structured findings detailing the impact and remediation steps for these exposure attempts.
The best way to remediate blind SSRF is using structured findings that provide specific impact details and remediation guidance. The scanner outputs these structured results to support secure remediation workflows for both internal and external endpoints.
Software-Design-ClubDesign and implement RESTful API endpoints with HTTP methods, status codes, and URL conventions.
jadecliDetect SSRF vulnerabilities in spider code and web-scraping scripts.
andrescardonas7Intercept and manipulate HTTP traffic to scan web applications for vulnerabilities.
ersinkocDetect SSRF vulnerabilities in user-controlled URLs and HTTP request patterns.
