ssrf

Name: ssrf
Availability: InStock
Author: SecurityforTech

Detect and exploit SSRF vulnerabilities in user-controlled URL inputs.

6|1|Updated Mar 9, 2026

Search Tags:#penetration testing #web security #vulnerability testing #network security #cloud security #ssrf

Ready to run

npx skills add https://github.com/securityfortech/hacking-skills --skill ssrf-securityfortech

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ssrf
Source: https://github.com/securityfortech/hacking-skills/tree/main/skills/web/injection/ssrf
Command: npx skills add https://github.com/securityfortech/hacking-skills --skill ssrf-securityfortech

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and exploit Server-Side Request Forgery (SSRF) vulnerabilities, which allow attackers to trick a server into making unintended requests to internal or external resources, potentially leading to data breaches or unauthorized access.

Core Features & Use Cases

Vulnerability Detection: Identifies parameters susceptible to SSRF by analyzing user-controlled input used in URL construction.
Exploitation Techniques: Provides methods to bypass filters, access internal services, cloud metadata endpoints, and local files.
Use Case: A web application allows users to input a URL for an image preview. This Skill can be used to test if this feature can be abused to make the server request sensitive data from internal APIs or cloud metadata services.

Quick Start

Use the ssrf skill to test the parameter 'url' on the target 'http://example.com' for SSRF vulnerabilities.

Frequently Asked Questions about ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test for Server-Side Request Forgery vulnerabilities in web applications?▼

You detect SSRF by analyzing user-controlled input used for URL construction to trick the server into making unintended requests to internal services, cloud metadata endpoints, or local files.

What is SSRF and how does it impact cloud security?▼

SSRF is a web security vulnerability that tricks a server into making unintended requests to internal or external resources, potentially leading to data breaches or unauthorized access to cloud metadata services.

Do I need Burp Collaborator or interactsh to detect out-of-band SSRF?▼

Yes, out-of-band SSRF detection requires tools like Burp Collaborator or interactsh to capture external interactions, while curl is used for manual vulnerability testing of target parameters.

How can I bypass filters to access internal services via SSRF?▼

You can bypass SSRF filters using various URL schemes and bypass techniques to access restricted internal services, local files, and cloud metadata endpoints through vulnerable application parameters.

What are common SSRF exploitation targets during penetration testing?▼

Common SSRF exploitation targets during penetration testing include internal network services, cloud metadata endpoints exposing instance credentials, and local files accessible via vulnerable URL parameters.