Detects SSRF vulnerabilities in web applications using OOB callbacks and metadata probes.
npx skills add https://github.com/woohyun212/security-skill --skill web-vuln-ssrf
Please help me install this Agent Skill. Skill: web-vuln-ssrf Source: https://github.com/woohyun212/security-skill/tree/main/web-vuln-ssrf Command: npx skills add https://github.com/woohyun212/security-skill --skill web-vuln-ssrf
Detecting Server-Side Request Forgery (SSRF) vulnerabilities, including bypassing IP blocklists and extracting cloud instance metadata.
Ask the AI to run the web‑vuln‑ssrf skill against a target URL to identify SSRF vectors and attempt metadata extraction.
High-intent search queries and answers about installing and using this skill.
To detect blind SSRF vulnerabilities, you validate out-of-band callbacks via an interactsh listener to confirm if a server-side request was successfully triggered. This method identifies blind SSRF instances without visible responses from the target application.
Bypassing IP blocklists for SSRF involves using 11 encoding formats and redirect chain methods to evade server-side filters. These techniques obscure the destination IP address, allowing requests to reach restricted internal services.
Extracting cloud instance metadata through SSRF requires probing AWS, GCP, and Azure metadata endpoints via URL-accepting parameters. This process attempts credential extraction and potential remote code execution on the targeted cloud environment.
Yes, you need an out-of-band listener and curl installed to test for server-side request forgery. You also require appropriate authorization to interact with the target and validate blind SSRF via OOB callbacks.
SSRF scanning fails to access internal services when server-side IP filters block direct requests to internal addresses. You must apply IP bypass techniques like encoding formats and redirect chains to evade these restrictions.
securityfortechDetect and exploit SSRF vulnerabilities in user-controlled URL inputs.
asdfgh1445Identify SSRF attack surfaces in web applications and cloud environments.
Awannaphasch2016Automate local web application testing with Playwright Python scripts.
SkobynIdentify open redirect vulnerabilities by analyzing URL parameters and testing redirect behavior.
