ssrf-server-side-request-forgery

Server-side request forgery (SSRF) exploitation targets cloud metadata endpoints by manipulating URL requests to access sensitive instance metadata. This Skill provides detailed cloud metadata endpoint catalogs and payload recipes for AWS, GCP, and Azure environments.

DNS rebinding is an SSRF technique that bypasses URL filter validation by fluctuating DNS resolution between an allowed domain and a restricted internal IP. This Skill details the complete DNS rebinding attack flow to bypass input validation mechanisms.

Chaining SSRF to remote code execution (RCE) often involves targeting internal services like Redis using protocol abuse. This Skill provides specific gopher:// payload recipes and SSRF to Redis to RCE exploitation scenarios.

Detecting blind SSRF vulnerabilities requires out-of-band interaction monitoring to confirm internal request execution without direct responses. This Skill covers blind SSRF detection techniques alongside URL filter bypass and protocol exploitation methods.

This SSRF exploitation playbook requires prior knowledge of web security and server-side request forgery exploitation techniques. It serves as an advanced reference for experts performing vulnerability exploitation rather than a beginner tutorial.

Yes, you can scan Kubernetes environments for SSRF vulnerabilities using this Skill. It includes specific K8s SSRF exploitation scenarios and real-world CVE chaining techniques tailored for containerized infrastructure.