ssrf-testing

Probe URL parameters with SSRF payloads to access internal services.

Updated Feb 23, 2026

Search Tags:#vulnerability testing #network scanning #ssrf #server-side request forgery #internal access #owasp api7

Ready to run

npx skills add https://github.com/devtint/API_PENTEST --skill ssrf-testing-devtint

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ssrf-testing
Source: https://github.com/devtint/API_PENTEST/tree/main/testing/SKILLS/ssrf-testing
Command: npx skills add https://github.com/devtint/API_PENTEST --skill ssrf-testing-devtint

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, interactsh-client, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and exploits Server-Side Request Forgery (SSRF) vulnerabilities, allowing access to internal services and sensitive data that would otherwise be unreachable.

Core Features & Use Cases

SSRF Detection: Probes APIs for parameters vulnerable to SSRF by sending crafted requests.
Internal Network Access: Attempts to access internal services, cloud metadata endpoints, and sensitive files.
Use Case: When an API allows users to input URLs for fetching external resources, this Skill can test if that functionality can be abused to make the server request internal resources, potentially revealing internal IP addresses, credentials, or application logic.

Quick Start

Use the ssrf-testing skill to probe the 'url' parameter on the target API for SSRF vulnerabilities.

Frequently Asked Questions about ssrf-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test APIs for Server-Side Request Forgery vulnerabilities?▼

To test APIs for Server-Side Request Forgery (SSRF), this skill identifies URL parameters and probes them with crafted payloads to access internal services and cloud metadata endpoints. It requires an out-of-band callback server to confirm vulnerabilities.

Can I bypass SSRF filters using IP encoding and protocol smuggling?▼

Yes, bypassing SSRF filters is possible using techniques like IP encoding and protocol smuggling. This skill probes target parameters with these specific payloads to circumvent restrictions and successfully reach internal services or sensitive data.

What is the best way to access cloud metadata endpoints through SSRF?▼

The best way to access cloud metadata endpoints through SSRF is probing API URL parameters that fetch external resources. This skill sends crafted requests to these parameters, aiming to reach internal cloud metadata and reveal sensitive data.

Do I need an out-of-band callback server for SSRF detection?▼

Yes, you need an out-of-band callback server for confirming SSRF detection. This skill requires an external interaction client to receive callbacks, verifying that the target server processed the crafted payloads and successfully reached the internal network.

How does an API become vulnerable to internal network access attacks?▼

An API becomes vulnerable to internal network access attacks when it allows users to input URLs for fetching external resources without proper validation. This SSRF vulnerability can be abused to make the server request internal resources, revealing IPs or credentials.