Explain SSRF attack mechanisms and mitigation best practices with code examples.
npx skills add https://github.com/hung-phan/system-skills --skill ssrf-hung-phan
Please help me install this Agent Skill. Skill: ssrf Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/ssrf Command: npx skills add https://github.com/hung-phan/system-skills --skill ssrf-hung-phan
This Skill unit educates users about the risks and best practices for preventing Server-Side Request Forgery (SSRF).
Review the Server-Side Request Forgery (SSRF) guide in the references directory.
High-intent search queries and answers about installing and using this skill.
Server-Side Request Forgery (SSRF) is a web security vulnerability where an attacker forces a server to make unauthorized requests. This skill explains the attack mechanism and how user inputs can be exploited.
You can prevent SSRF by applying defensive coding best practices. This skill provides code examples in multiple languages to validate user inputs and restrict server-side fetching of external resources.
Network security strategies to mitigate SSRF involve infrastructure hardening and isolating internal services. This skill provides infrastructure examples to segment networks and restrict outbound traffic from web servers.
Yes, applications that fetch external links based on user input are highly susceptible to SSRF. This skill targets developers building these features to avoid common vulnerabilities through proper input validation.
The best way to implement defensive coding for SSRF is combining application-level input validation with network-level restrictions. This skill offers both code examples and infrastructure hardening strategies for comprehensive defense.
ArianHobson333Detects SSRF vulnerabilities via out-of-band requests and cloud metadata checks.
chainreactorsAutomates weak credential detection across network services using aiscan.
lapc506Manage Kubernetes network policies with ingress and egress rules.
gke-labsAudit Kubernetes network policies and firewall rules for AI agent sandboxes.
