skills.rest
jayjpatel9717
jayjpatel9717COMMUNITY
Explore all skills by this author →
GitHub

ssrf-testing

Detect and classify SSRF vulnerabilities in web applications.

Updated Apr 21, 2026
Search Tags:#vulnerability detection#security assessment#ssrf#cloud metadata#protocol smuggling
One-click install
npx skills add https://github.com/jayjpatel9717/kurukshetra --skill ssrf-testing-jayjpatel9717
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssrf-testing
Source: https://github.com/jayjpatel9717/kurukshetra/tree/main/squads/pentest/agents/bheem/skills/ssrf-testing
Command: npx skills add https://github.com/jayjpatel9717/kurukshetra --skill ssrf-testing-jayjpatel9717

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for detecting and classifying SSRF vulnerabilities, ensuring robust security assessments.

Core Features & Use Cases

  • Detection-First Philosophy: Focuses on identifying SSRF vulnerabilities without exploitation.
  • Detection Workflow: Implements a thorough methodology with steps for probe, observe, classify, and stop.
  • Vulnerability Priority Matrix: Offers a clear severity classification for different types of SSRF vulnerabilities.
  • Methodology Workflow: Provides a structured approach to identify SSRF surfaces, test basic SSRF, probe cloud metadata, bypass filters, and classify findings.
  • Bypass Techniques: Offers a range of techniques to bypass SSRF filters and validate SSRF presence.
  • Protocol Smuggling Detection: Identifies if the SSRF endpoint accepts non-HTTP URL schemes and detects internal services.
  • Cloud Metadata Endpoint Exploitation: Details the exploitation of cloud metadata endpoints for SSRF vulnerabilities.
  • SSRF Bypass Techniques: Provides a quick reference for bypassing SSRF filters.
  • Impact Chain: Describes the potential impact of SSRF vulnerabilities on different access levels.
  • WAF Bypass: Offers techniques to bypass Web Application Firewalls.
  • Internal Port Scan: Probes for open ports using SSRF.
  • SSRF Bypass Awareness: Provides awareness of bypass techniques and detection context.

Quick Start

Run the ssrf-testing skill to perform an SSRF security assessment on the target domain 'example.com'.

Frequently Asked Questions about ssrf-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect SSRF vulnerabilities in web applications?▼

You can detect SSRF vulnerabilities by running a structured assessment that sends payloads to the target application and monitors DNS/HTTP callbacks to identify and classify server-side request forgery flaws.

What is the best way to bypass SSRF filters and Web Application Firewalls?▼

Bypassing SSRF filters and WAFs involves using specific protocol smuggling techniques and URL manipulation tricks to validate the presence of the vulnerability when basic payloads are blocked.

How does SSRF cloud metadata endpoint exploitation work?▼

SSRF cloud metadata exploitation works by tricking the vulnerable application into requesting internal cloud metadata IP addresses, allowing you to extract sensitive instance credentials and configuration data.

Can I perform an internal port scan using SSRF payloads?▼

Yes, you can probe for open internal ports by leveraging the SSRF endpoint to send requests to various local network addresses and observing the response times and error messages.

How do I classify the severity of detected SSRF vulnerabilities?▼

You classify SSRF severity using a vulnerability priority matrix that evaluates the access level gained and the potential impact chain, categorizing findings from basic internal access to cloud metadata exposure.

Related Skills

Explore More Software Engineering Skills→
sjinkssjinks

security-review-owasp-server-side-request-forgery-prevention

Review outbound request features against OWASP SSRF prevention guidance.

Community
Advanced
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
jokken79jokken79
1

Burp Suite Web Application Testing

Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.

Community
Advanced
gke-labsgke-labs
42

review-security-k8s-main

Coordinates parallel security sub-agents to audit Kubernetes infrastructure and vulnerabilities into a JSON report.

Official
Advanced