ssrf

This Skill identifies Server-Side Request Forgery vulnerabilities by tracing user-controlled URLs through HTTP client sinks. It applies taint analysis to monitor data flow from external inputs to identify potential SSRF targets where unauthorized server requests occur.

A high-yield SSRF vulnerability is a flaw allowing critical impacts like credential access or remote code execution. Taint analysis finds these by tracking user-controlled inputs to HTTP sinks, recognizing protocol bypasses that enable security chain promotion.

Yes, taint analysis can detect cloud metadata pivoting and DNS rebinding bypasses. It specifically traces user-controlled URLs targeting HTTP client sinks in environments with exposed internal or metadata services to identify these protocol-specific bypasses.

You run a taint audit by activating the SSRF Skill and executing it against your target application. The audit traces user-controlled URLs to HTTP client sinks, identifying and promoting SSRF chains that bypass security measures.

Yes, SSRF taint analysis is specifically designed for environments with exposed internal or metadata services. It traces user-controlled inputs to HTTP client sinks, effectively identifying vulnerabilities where external requests can target internal infrastructure.