#

ssrf

Here are 54 public repositories matching this topic...

nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters

Star

A list of resources for those interested in getting started in bug bounties

education hackers hacking xss bug-bounty web-security pentest ssrf bug-bounty-hunters learn2hack

Updated Oct 17, 2020

cujanovic / SSRF-Testing

Star

SSRF (Server Side Request Forgery) testing resources

pentesting pentest ssrf pentest-tool server-side-request-forgery

Updated Sep 5, 2020
Python

swisskyrepo / SSRFmap

Star

Automatic SSRF fuzzer and exploitation tool

vulnerability ctf pentest exploitation hacktoberfest ssrf server-side-request-forgery ssrfmap

Updated Oct 6, 2020
Python

tarunkant / Gopherus

Star

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

mysql redis postgresql zabbix rce smtp gopher memcache fastcgi ssrf github-rce

Updated Aug 2, 2020
Python

JoyChou93 / java-sec-code

Star

Java web common vulnerabilities and security code which is base on springboot and spring security

java cors security benchmark web code tomcat jsonp rmi rce deserialize sqli ssrf xxe spel

Updated Aug 18, 2020
Java

incredibleindishell / SSRF_Vulnerable_Lab

Star

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

attack lab hacking web-security exploitation ssrf server-side-request-forgery

Updated Sep 29, 2020
PHP

YagamiiLight / Cerberus

Star

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

python middleware proxy waf xss penetration-testing sql-injection bypass hacking-tool ssrf security-tools websecurity

Updated Jan 5, 2020
Python

bcoles / ssrf_proxy

Star

SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.

magic proxy ssrf ssrf-proxy

Updated Jan 1, 2018
Ruby

reddelexc / hackerone-reports

Star

Top disclosed reports from HackerOne

xss rce reports sql-injection csrf writeups bugbounty ssrf hackerone xxe idor

Updated Nov 7, 2020
Python

cn-panda / JavaCodeAudit

Star

Getting started with java code auditing 代码审计入门的小项目

java sql code xss jackson rce fastjson ssrf weblogic vulnerability-analysis

Updated Oct 13, 2020
JavaScript

teknogeek / ssrf-sheriff

Star

A simple SSRF-testing sheriff written in Go

go bugbounty ssrf

Updated May 24, 2020
Go

Tr3jer / dnsAutoRebinding

Star

ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6

dns ssrf rebinding

Updated Aug 17, 2017
Python

xxexploiter

luisfontes19 / xxexploiter

Star

Tool to help exploit XXE vulnerabilities

cdata exploit command xml read file entities external exploitation expect dtd xee ssrf xxe oob exection

Updated Jul 22, 2020
TypeScript

Dliv3 / redis-rogue-server

Star

Redis 4.x/5.x RCE

redis rce ssrf remote-code-execution redis-rogue-server redis-unauthorized-access

Updated May 21, 2020
Python

random-robbie / Jira-Scan

Star

CVE-2017-9506 - SSRF

jira bugbounty ssrf

Updated Apr 26, 2018
Python

pikpikcu / XRCross

Star

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

cors coffee rce sqli xss-vulnerability recon bugbounty xss-scanner scanners ssrf lfi takeover-subdomain subdomain-enumeration cors-scanner bugbounty-tool check-subdomains

Updated Sep 6, 2020
Shell

chennqqi / godnslog

Star

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

xss rce vulnerability ssrf rfi xxe dnslog webscan

Updated Nov 9, 2020
Go

giteshnxtlvl / YourNextBugTip

Star

Collection of Twitter Bug Bounty Tips and Tricks

security twitter bug hacking xss enumeration vulnerability csrf bugbounty pentest bypass ssrf sqlinjection xxe bugbountytips bugbountytricks twitter-tips hacking-tips yournextbugtip

Updated Sep 23, 2020

terjanq / Flag-Capture

Star

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

competition web sql-injection csrf ctf capture-the-flag ssrf xss-injection css-injection

Updated Sep 21, 2020
HTML

BitTheByte / Eagle

Star

yet another vulnerability scanner

python ftp hacking xss bugbounty cve takeover bugcrowd ssrf hackerone

Updated May 15, 2020
Python

k8gege / ZimbraExploit

Star

Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)

exploit upload poc rce zimbra ssrf 0day xxe getshell k8cscan cve-2019-9621

Updated May 8, 2019
Ruby

dreadlocked / SSRFmap

Star

Simple Server Side Request Forgery services enumeration tool.

map enumeration bug-bounty pentesting ssrf

Updated Aug 23, 2018
Ruby

knassar702 / lorsrf

Star

SSRF parameter bruteforce

bruteforce ngrok bugbounty ssrf websecurity

Updated Nov 10, 2020
Python

ssrf_filter

arkadiyt / ssrf_filter

Star

A ruby gem for defending against Server Side Request Forgery (SSRF) attacks

ruby gem ssrf server-side-request-forgery

Updated Nov 3, 2020
Ruby

junnlikestea / bulkssrf

Star

Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.

rust async tokio-rs ssrf bugbounty-tool

Updated Jul 7, 2020
Rust

grayddq / SSRF_payload

Star

本脚本旨在生成各类畸形URL链接，进行探测使用的payload，尝试绕过服务端ssrf限制。

Updated Jan 9, 2019
Python

OlivierLaflamme / Auditing-Vulnerabilities

Star

In this repository I'll host my research and methodologies for auditing vulnerabilities

http waf csrf crlf ssrf xxe smuggling auditing-vulnerabilities

Updated Jan 7, 2020
PHP

welefen / ssrf-agent

Star

make http(s) request to prevent SSRF

agent dns http https lookup ssrf

Updated Oct 31, 2019
JavaScript

knassar702 / hacking-lab

Star

Small Vulnerable Web

python flask xss bugbounty ssrf sqlinjection hackable uploadfile openredirect hacking-lab ssti cmdinjection

Updated Aug 13, 2020
HTML

tirkarthi / clj-http-ssrf

Star

A clj-http middleware to prevent SSRF attacks

clojure ssrf clj-http-middleware

Updated Apr 19, 2018
Clojure

Improve this page

Add a description, image, and links to the ssrf topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ssrf topic, visit your repo's landing page and select "manage topics."

You can’t perform that action at this time.