The Wayback Machine - https://web.archive.org/web/20200704004702/https://github.com/topics/ssrf

#

ssrf

Here are 48 public repositories matching this topic...

nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters

Star

A list of resources for those interested in getting started in bug bounties

education hackers hacking xss bug-bounty web-security pentest ssrf bug-bounty-hunters learn2hack

Updated Jul 2, 2020

cujanovic / SSRF-Testing

Star

SSRF (Server Side Request Forgery) testing resources

pentesting pentest ssrf pentest-tool server-side-request-forgery

Updated May 25, 2020
Python

swisskyrepo / SSRFmap

Star

Automatic SSRF fuzzer and exploitation tool

vulnerability ctf pentest exploitation ssrf server-side-request-forgery ssrfmap

Updated Jan 28, 2020
Python

tarunkant / Gopherus

Star

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

mysql redis zabbix rce smtp gopher memcache fastcgi ssrf github-rce

Updated Oct 10, 2019
Python

JoyChou93 / java-sec-code

Star

Java web common vulnerabilities and security code which is base on springboot and spring security

java cors security benchmark web code tomcat jsonp rmi rce deserialize sqli ssrf xxe spel

Updated Jul 1, 2020
Java

incredibleindishell / SSRF_Vulnerable_Lab

Star

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

attack lab hacking web-security exploitation ssrf server-side-request-forgery

Updated Oct 21, 2019
PHP

YagamiiLight / Cerberus

Star

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

python middleware proxy waf xss penetration-testing sql-injection bypass hacking-tool ssrf security-tools websecurity

Updated Jan 5, 2020
Python

bcoles / ssrf_proxy

Star

SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.

magic proxy ssrf ssrf-proxy

Updated Jan 1, 2018
Ruby

Tr3jer / dnsAutoRebinding

Star

ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6

dns ssrf rebinding

Updated Aug 17, 2017
Python

teknogeek / ssrf-sheriff

Star

A simple SSRF-testing sheriff written in Go

go bugbounty ssrf

Updated May 24, 2020
Go

reddelexc / hackerone-reports

Star

Top disclosed reports from HackerOne

xss rce reports sql-injection csrf writeups bugbounty ssrf hackerone xxe idor

Updated Jun 22, 2020
Python

cn-panda / JavaCodeAudit

Star

Getting started with java code auditing 代码审计入门的小项目

java sql code xss jackson rce fastjson ssrf weblogic vulnerability-analysis

Updated Feb 6, 2020
JavaScript

random-robbie / Jira-Scan

Star

CVE-2017-9506 - SSRF

jira bugbounty ssrf

Updated Apr 26, 2018
Python

Dliv3 / redis-rogue-server

Star

Redis 4.x/5.x RCE

redis rce ssrf remote-code-execution redis-rogue-server redis-unauthorized-access

Updated May 21, 2020
Python

xxexploiter

luisfontes19 / xxexploiter

Star

Tool to help exploit XXE vulnerabilities

cdata exploit command xml read file entities external exploitation expect dtd xee ssrf xxe oob exection

Updated Jun 9, 2020
TypeScript

terjanq / Flag-Capture

Star

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

competition web sql-injection csrf ctf capture-the-flag ssrf xss-injection css-injection

Updated Dec 30, 2019
HTML

k8gege / ZimbraExploit

Star

Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)

exploit upload poc rce zimbra ssrf 0day xxe getshell k8cscan cve-2019-9621

Updated May 8, 2019
Ruby

pikpikcu / XRCross

Star

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

cors rce sqli xss-vulnerability recon bugbounty xss-scanner scanners ssrf lfi takeover-subdomain subdomain-enumeration bugbounty-tool

Updated Jun 30, 2020
Shell

dreadlocked / SSRFmap

Star

Simple Server Side Request Forgery services enumeration tool.

map enumeration bug-bounty pentesting ssrf

Updated Aug 23, 2018
Ruby

ssrf_filter

arkadiyt / ssrf_filter

Star

A ruby gem for defending against Server Side Request Forgery (SSRF) attacks

ruby gem ssrf server-side-request-forgery

Updated Dec 10, 2019
Ruby

giteshnxtlvl / YourNextBugTip

Star

Collection of Twitter Bug Bounty Tips and Tricks

security twitter bug hacking xss enumeration vulnerability csrf bugbounty pentest bypass ssrf sqlinjection xxe bugbountytips bugbountytricks twitter-tips hacking-tips yournextbugtip

Updated Apr 20, 2020

grayddq / SSRF_payload

Star

本脚本旨在生成各类畸形URL链接，进行探测使用的payload，尝试绕过服务端ssrf限制。

Updated Jan 9, 2019
Python

BitTheByte / Eagle

Star

yet another vulnerability scanner

python ftp hacking xss bugbounty cve takeover bugcrowd ssrf hackerone

Updated May 15, 2020
Python

welefen / ssrf-agent

Star

make http(s) request to prevent SSRF

agent dns http https lookup ssrf

Updated Oct 31, 2019
JavaScript

junnlikestea / bulkssrf

Star

Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.

rust async tokio-rs ssrf bugbounty-tool

Updated Jul 3, 2020
Rust

OlivierLaflamme / Auditing-Vulnerabilities

Star

In this repository I'll host my research and methodologies for auditing vulnerabilities

http waf csrf crlf ssrf xxe smuggling auditing-vulnerabilities

Updated Jan 7, 2020
PHP

knassar702 / hacking-lab

Star

Small Vulnerable Web

python flask xss bugbounty ssrf sqlinjection hackable uploadfile openredirect hacking-lab ssti cmdinjection

Updated Sep 13, 2019
HTML

tirkarthi / clj-http-ssrf

Star

A clj-http middleware to prevent SSRF attacks

clojure ssrf clj-http-middleware

Updated Apr 19, 2018
Clojure

Kevin-sa / SSRF_ex

Star

SSRF漏洞测试、利用 SSRF vulnerability testing and utilization

Updated Jul 4, 2018
Python

IncludeSecurity / safeurl-python

Star

Open

Add address check inside OPENSOCKET callback

JordanMilne commented Aug 23, 2016

pycurl has a hook that can run whenever a socket is opened, with one of the parameters being the resolved IP of the address to connect to (at least according to this unit test.)

If you check the address passed into the callback against the IP whitelist / b

Read more

Improve this page

Add a description, image, and links to the ssrf topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ssrf topic, visit your repo's landing page and select "manage topics."

You can’t perform that action at this time.