Automatic SSRF fuzzer and exploitation tool

SSRF (Server Side Request Forgery) testing resources

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

A ruby gem for defending against Server Side Request Forgery (SSRF) attacks

A comprehensive browser extension designed for authorized security testing and penetration testing activities. CyberInject provides quick access to common security payloads across multiple vulnerability categories.

Proof-of-Concept for Server Side Request Forgery (SSRF) in request-baskets (<= v.1.2.1)

An ongoing & curated collection of awesome web vulnerability - Server-side request forgery software practices and remediation, libraries and frameworks, best guidelines and technical resources about SSRF

Module to prevent SSRF when sending requests in NodeJS. Blocks request to local and private IP addresses

Example exploitable scenarios for CVE-2024-22243 affecting the Spring framework (open redirect & SSRF).

CVE-2021-40438 Apache <= 2.4.48 SSRF exploit

Automated blind SSRF scanner with native PingBack.sh OAST correlation, persistent callbacks and exact injection tracking.

this a ssrf scripts

Gopher HTTP requests (POST/GET)

CloudSSRFer tests SSRF on Amazon AWS cloud to extract sensitive information.

Server-Side Request Forgery (SSRF) protection plugin for HTTPlug

SSRF, Server-Side Request Forgery: Exploiting a vulnerable avatar fetching feature using directory traversal to force the server to access an internal /private endpoint and retrieve a base64-encoded flag.

Drop-in SSRF protection for httpx

Lightweight SSRF (Server-Side Request Forgery) protection for HttpClient in .NET microservices.

Header-based SSRF (scanner-for-debugging) fuzzing utility inspired by a HackerOne Blind SSRF report. Automates injection of Forwarded-type headers, detects time-delay behavior and 429 responses, supports authenticated flows, logs results, and optionally integrates Telegram notifications for controlled security testing.

This is a difficult web exploitation task. To solve it, I must exploit a Server-Side Request Forgery (SSRF) vulnerability in Git webhooks and use template injection. This allowed me to gain admin privileges via localhost, create a custom Git packfile to add myself as a collaborator to the hidden repository, and then clone it to read the flag.