ssrf

Detect and exploit server-side request forgery vulnerabilities in URL parameters.

518|47|Updated Nov 10, 2025

Search Tags:#automation #webhook #vulnerability-detection #ssrf #internal-access

One-click install

npx skills add https://github.com/yhy0/CHYing-agent --skill ssrf

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: ssrf
Source: https://github.com/yhy0/CHYing-agent/tree/main/chying_agent/skills/ssrf
Command: npx skills add https://github.com/yhy0/CHYing-agent --skill ssrf

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the detection and exploitation of server-side request forgery vulnerabilities, enabling quick assessment of internal reach and risky configurations.

Core Features & Use Cases

Automated SSRF Vectors: Test URL parameters, remote file loading, webhooks, PDF generation, and URL previews for SSRF behavior.
Protocol & Endpoint Coverage: Evaluate file, gopher, dict, and other protocol-based SSRF pathways to harvest internal data safely.
Use Case: Run against an application that fetches remote resources to determine whether internal hosts can be reached.

Quick Start

Example: Activate the SSRF skill against a target endpoint such as http://target.example/fetch?url=http://internal-service.local/health and inspect the results.