skills.rest
securityfortech
securityfortechOFFICIAL
Explore all skills by this author →
WebsiteGitHub

ssrf

Detect and exploit SSRF vulnerabilities in user-controlled URL inputs.

6|1|Updated Mar 9, 2026
Search Tags:#penetration testing#web security#vulnerability testing#network security#cloud security#ssrf
One-click install
npx skills add https://github.com/securityfortech/hacking-skills --skill ssrf-securityfortech
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssrf
Source: https://github.com/securityfortech/hacking-skills/tree/main/skills/web/injection/ssrf
Command: npx skills add https://github.com/securityfortech/hacking-skills --skill ssrf-securityfortech

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and exploit Server-Side Request Forgery (SSRF) vulnerabilities, which allow attackers to trick a server into making unintended requests to internal or external resources, potentially leading to data breaches or unauthorized access.

Core Features & Use Cases

  • Vulnerability Detection: Identifies parameters susceptible to SSRF by analyzing user-controlled input used in URL construction.
  • Exploitation Techniques: Provides methods to bypass filters, access internal services, cloud metadata endpoints, and local files.
  • Use Case: A web application allows users to input a URL for an image preview. This Skill can be used to test if this feature can be abused to make the server request sensitive data from internal APIs or cloud metadata services.

Quick Start

Use the ssrf skill to test the parameter 'url' on the target 'http://example.com' for SSRF vulnerabilities.

Frequently Asked Questions about ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for Server-Side Request Forgery vulnerabilities in web applications?▼

You detect SSRF by analyzing user-controlled input used for URL construction to trick the server into making unintended requests to internal services, cloud metadata endpoints, or local files.

What is SSRF and how does it impact cloud security?▼

SSRF is a web security vulnerability that tricks a server into making unintended requests to internal or external resources, potentially leading to data breaches or unauthorized access to cloud metadata services.

Do I need Burp Collaborator or interactsh to detect out-of-band SSRF?▼

Yes, out-of-band SSRF detection requires tools like Burp Collaborator or interactsh to capture external interactions, while curl is used for manual vulnerability testing of target parameters.

How can I bypass filters to access internal services via SSRF?▼

You can bypass SSRF filters using various URL schemes and bypass techniques to access restricted internal services, local files, and cloud metadata endpoints through vulnerable application parameters.

What are common SSRF exploitation targets during penetration testing?▼

Common SSRF exploitation targets during penetration testing include internal network services, cloud metadata endpoints exposing instance credentials, and local files accessible via vulnerable URL parameters.

Related Skills

Explore More Software Engineering Skills→
woohyun212woohyun212
21

web-vuln-ssrf

Detects SSRF vulnerabilities in web applications using OOB callbacks and metadata probes.

Community
Advanced
wgpsecwgpsec
1.6k

cloud-metadata

Detect and exploit cloud instance metadata across AWS, Azure, GCP, Alibaba Cloud, and Tencent Cloud.

Official
Advanced
jokken79jokken79
1

Burp Suite Web Application Testing

Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.

Community
Advanced
cxnaivecxnaive

web-pentest

Perform authorized web application penetration testing with reconnaissance, vulnerability analysis, and proof-based exploitation.

Community
Advanced