skills.rest
xijunww
xijunwwCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ssrf-server-side-request-forgery

Detect and analyze SSRF vulnerabilities in external HTTP request handling.

1|Updated Jun 26, 2026
Search Tags:#vulnerability assessment#network security#cloud security#SSRF#security exploitation
One-click install
npx skills add https://github.com/xijunww/Pentest --skill ssrf-server-side-request-forgery-xijunww
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssrf-server-side-request-forgery
Source: https://github.com/xijunww/Pentest/tree/main/packages/core/src/config/skills/builtin/ssrf-server-side-request-forgery
Command: npx skills add https://github.com/xijunww/Pentest --skill ssrf-server-side-request-forgery-xijunww

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ssrf-detector, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Identifies and analyzes potential Server-Side Request Forgery (SSRF) vulnerabilities within a given application.

Core Features & Use Cases

  • Detection of SSRF Vectors: Identifies input fields that accept user input and are capable of making external HTTP requests.
  • Analysis of Bypass Mechanisms: Evaluates methods by which URL filtering is bypassed, including IP address variants, local network resolution, and protocol routing.
  • Cloud Metadata Exploitation: Analyzes and identifies common SSRF exploitation points against cloud services like AWS, GCP, and Azure.

Quick Start

Load the SSRF skill and execute the following command to test for SSRF vulnerabilities in the current application context.

Frequently Asked Questions about ssrf-server-side-request-forgery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect Server-Side Request Forgery vulnerabilities in web applications?▼

This Skill detects Server-Side Request Forgery (SSRF) vulnerabilities by assessing application behavior related to external HTTP requests and identifying input fields that accept URLs for external resource fetching.

What techniques bypass IP address filtering during SSRF exploitation?▼

SSRF exploitation bypasses IP address filtering by evaluating IP address variants, local network resolution, and protocol routing. Analyzing these bypass mechanisms helps identify weaknesses in application URL filtering rules.

How can I test for cloud metadata exposure points via SSRF?▼

You can test for cloud metadata exposure points via SSRF by analyzing common exploitation vectors against cloud services like AWS, GCP, and Azure. This identifies metadata endpoints vulnerable to unauthorized external requests.

Does this SSRF vulnerability assessment tool work with AWS, GCP, and Azure environments?▼

Yes, this SSRF vulnerability assessment tool analyzes common exploitation points specifically targeting cloud services like AWS, GCP, and Azure to identify potential metadata exposure risks in complex systems.

Do I need the ssrf-detector dependency to analyze external HTTP request handling?▼

Yes, you need the ssrf-detector dependency to analyze external HTTP request handling. It provides the foundational detection capabilities required to assess potential SSRF vectors in your application context.

Related Skills

Explore More Software Engineering Skills→
jayjpatel9717jayjpatel9717

ssrf-testing

Detect and classify SSRF vulnerabilities in web applications.

Community
Advanced
asdfgh1445asdfgh1445
735

Strix•SSRF 测试

Identify SSRF attack surfaces in web applications and cloud environments.

Community
Intermediate
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

ssrf

Guide SSRF exploitation across HTTP, HTTPS, file, gopher, and dict protocols.

Official
Advanced