ssrf

Explain SSRF attack mechanisms and mitigation best practices with code examples.

Updated Jun 5, 2026

Search Tags:#web security #network security #application security #ssrf #defensive coding

Ready to run

npx skills add https://github.com/hung-phan/system-skills --skill ssrf-hung-phan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ssrf
Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/ssrf
Command: npx skills add https://github.com/hung-phan/system-skills --skill ssrf-hung-phan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill unit educates users about the risks and best practices for preventing Server-Side Request Forgery (SSRF).

Core Features & Use Cases

Explanation of SSRF: Describes what SSRF is and how it can be exploited.
Defensive Measures: Provides code and infrastructure examples to protect against SSRF attacks.
Use Case: For organizations building web applications that allow external links or user inputs to be fetched by their servers, this skill unit helps to avoid common SSRF vulnerabilities.

Quick Start

Review the Server-Side Request Forgery (SSRF) guide in the references directory.

Frequently Asked Questions about ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is Server-Side Request Forgery and how does it exploit web applications?▼

Server-Side Request Forgery (SSRF) is a web security vulnerability where an attacker forces a server to make unauthorized requests. This skill explains the attack mechanism and how user inputs can be exploited.

How do I prevent Server-Side Request Forgery in my application code?▼

You can prevent SSRF by applying defensive coding best practices. This skill provides code examples in multiple languages to validate user inputs and restrict server-side fetching of external resources.

What network security strategies help mitigate SSRF attacks?▼

Network security strategies to mitigate SSRF involve infrastructure hardening and isolating internal services. This skill provides infrastructure examples to segment networks and restrict outbound traffic from web servers.

Do I need to secure external link fetching to avoid SSRF vulnerabilities?▼

Yes, applications that fetch external links based on user input are highly susceptible to SSRF. This skill targets developers building these features to avoid common vulnerabilities through proper input validation.

What is the best way to implement defensive coding for SSRF prevention?▼

The best way to implement defensive coding for SSRF is combining application-level input validation with network-level restrictions. This skill offers both code examples and infrastructure hardening strategies for comprehensive defense.